Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard.Check if you run itEPSS 0.21%Jun 2, 2026
- High7.5OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard.Check if you run itEPSS 0.52%Jun 2, 2026
- Medium5.3NiceGUI is a Python-based UI framework.Check if you run itEPSS 0.60%Jun 2, 2026
- High7.8A high security vulnerability affecting Security Center main server installations has been identified.Check if you run itEPSS 0.15%Jun 2, 2026
- High8.5The Bitdefender Napoca bare-metal hypervisor contains an out-of-bounds write vulnerability in the real-mode hook handler, implemented in napoca/kernel/handler.c.Check if you run itEPSS 0.12%Jun 2, 2026
- High8.5Bitdefender Napoca bare-metal hypervisor contains an out-of-bounds write vulnerability in the BIOS INT 0x15 / E820 memory map handler, implemented in napoca/guests/bios_handlers.c.Check if you run itEPSS 0.12%Jun 2, 2026
- Medium4.9CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from 8.0.5700 to 13.3.7652 allows a remote authenticated attacker to obtai…Check if you run itEPSS 0.51%Jun 2, 2026
- High7.5CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from 14.0.7700 to 14.4.8152, and 15.0.8200 to 15.0.8234, and 15.1.8300 to…Check if you run itEPSS 0.55%Jun 2, 2026
- Critical9.8CWE-284: Improper Access Control in web services in Progress Sitefinity 15.4.8623 before 15.4.8630 allows a remote unauthenticated attacker to access content that shou…Check if you run itEPSS 0.65%Jun 2, 2026
- Medium5.6Path traversal vulnerability in Gleam's dependency management allows arbitrary directory deletion via malicious build/packages/packages.toml content.Check if you run itEPSS 0.19%Jun 2, 2026
- Medium5.1Symlink following vulnerability in Gleam's Hex package export allows files outside the project root to be embedded in the generated package tarball.Check if you run itEPSS 0.17%Jun 2, 2026
- Medium4.3NamelessMC is website software for Minecraft servers.Check if you run itEPSS 0.30%Jun 2, 2026
- High7.5Path traversal in restore handler in Collibra Agent, allows an attacker to write arbitrary files via a crafted ZIP archive.Check if you run itEPSS 0.40%Jun 2, 2026
- High8.2An authentication bypass vulnerability exists in MISP when LDAP mixed authentication is enabled with OTP enforcement.Check if you run itEPSS 0.35%Jun 2, 2026
- High8.8Dräger Infinity Acute Care System and Standalone Infinity M540 patient monitors running software versions VG4.1.1, VG4.0.3, and lower contain network message handling…Check if you run itEPSS 0.13%Jun 2, 2026
- Medium5.3Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain an information disclosure vulnerability that allows unauthenticated network attackers to access log…Check if you run itEPSS 0.20%Jun 2, 2026
- Medium6.5D.Launcher 2 component of Slovak eID client ecosystem contains Improper URL Handler Processing vulnerability.Check if you run itEPSS 0.39%Jun 2, 2026
- High8.1A path traversal vulnerability exists in jupyter-server version 2.17.0 due to an incorrect root directory boundary check in the _get_os_path() function within jupyter_…Check if you run itEPSS 0.55%Jun 2, 2026
- Medium5.3Missing Authorization vulnerability in Anton Shevchuk Constructor allows Accessing Functionality Not Properly Constrained by ACLs.Check if you run itEPSS 0.19%Jun 2, 2026
- Medium4.3The Laiser Tag plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.5.Check if you run itEPSS 0.19%Jun 2, 2026
- Medium6.1The hiWeb Migration Simple plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'new_domain' parameter in all versions up to, and including, 2.…Check if you run itEPSS 0.21%Jun 2, 2026
- Medium6.4The FPW Category Thumbnails plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the 'fpw_fs_get_file' AJAX action in all versio…Check if you run itEPSS 0.19%Jun 2, 2026
- High8.8The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy.Check if you run itEPSS 0.19%Jun 2, 2026
- High7.5The Really Simple Security WordPress plugin before 9.5.10.1 does not enforce the second-factor challenge in two of its two-factor authentication REST endpoints, allowi…Check if you run itEPSS 0.39%Jun 2, 2026
- Medium6.5MLflow 3.9.0 with basic-auth ( ) fails to enforce authorization checks for multiple Gateway API 'list' endpoints.Check if you run itEPSS 0.36%Jun 2, 2026
Sort