Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.9Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.98%May 30, 2025
- Medium5.1Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a system might treat aCheck if you run itEPSS 0.23%May 30, 2025
- Critical9.3An insufficient database Row-Level Security policy in Lovable through 2025-04-15 allows remote unauthenticated attackers to read or write to arbitrary database tables of generatedCheck if you run itEPSS 0.83%May 30, 2025
- High8.8Missing AuthorizationPatch nowKEVEPSS 0.32%May 30, 2025
- Critical9.1Tinxy WiFi Lock Controller v1 RF was discovered to be configured to transmit on an open Wi-Fi network, allowing attackers to join the network without authentication.Check if you run itEPSS 0.48%May 30, 2025
- Critical9.3The CS5000 Fire Panel is vulnerable due to a hard-coded password that runs on a VNC server and is visible as a string in the binary responsible for running VNC.Check if you run itEPSS 0.73%May 29, 2025
- Critical9.3The CS5000 Fire Panel is vulnerable due to a default account that exists on the panel.Check if you run itEPSS 0.73%May 29, 2025
- Critical9.3Instantel Micromate lacks authentication on a configuration port which could allow an attacker to execute commands if connected.Check if you run itEPSS 0.85%May 29, 2025
- Medium6.9A vulnerability was found in 1000 Projects Online Notice Board 1.0 and classified as critical.Check if you run itEPSS 0.63%May 29, 2025
- High8.4Santesoft Sante DICOM Viewer Pro contains a memory corruption vulnerability.Check if you run itEPSS 0.20%May 29, 2025
- Critical9.8This issue was addressed through improved state management.Check if you run itEPSS 0.32%May 29, 2025
- Medium5.5A permissions issue was addressed with additional sandbox restrictions.Check if you run itEPSS 0.19%May 29, 2025
- Medium5.5A permissions issue was addressed with additional restrictions.Check if you run itEPSS 0.19%May 29, 2025
- Medium5.5A logging issue was addressed with improved data redaction.Check if you run itEPSS 0.52%May 29, 2025
- Medium4.6An authentication issue was addressed with improved state management.Check if you run itEPSS 0.26%May 29, 2025
- Medium5.5This issue was addressed with improved validation of symlinks.Check if you run itEPSS 0.23%May 29, 2025
- Critical9.1The issue was addressed with improved memory handling.Check if you run itEPSS 0.40%May 29, 2025
- High8.2A file quarantine bypass was addressed with additional checks.Check if you run itEPSS 0.20%May 29, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0.Check if you run itEPSS 0.84%May 29, 2025
- Medium5.3A vulnerability was found in chshcms mccms 2.7.Check if you run itEPSS 1.31%May 29, 2025
- Medium5.3A vulnerability was found in chshcms mccms 2.7.Check if you run itEPSS 0.56%May 29, 2025
- Medium5.3A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0 and classified as critical.Check if you run itEPSS 0.53%May 29, 2025
- Critical9.1Esri Portal for ArcGIS 11.4 and prior allows a remote, unauthenticated attacker to bypass the Portal’s SSRF protections.Check if you run itEPSS 0.58%May 29, 2025
- Medium5.3A vulnerability has been found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0 and classified as critical.Check if you run itEPSS 0.54%May 29, 2025
- Critical9.1Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.Check if you run itEPSS 0.49%May 29, 2025
Sort