Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Vulnerability in the Net Service component of Oracle Database Server.Check if you run itEPSS 0.47%May 28, 2026
- High7.5Vulnerability in the Net Service component of Oracle Database Server.Check if you run itEPSS 0.47%May 28, 2026
- Critical9.0Vulnerability in the Net Service component of Oracle Database Server.Check if you run itEPSS 0.42%May 28, 2026
- High7.5Vulnerability in Oracle REST Data Services (component: Mongoapi).Check if you run itEPSS 0.47%May 28, 2026
- High8.8Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Self Service Manager).Check if you run itEPSS 0.43%May 28, 2026
- High8.8Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).Check if you run itEPSS 0.43%May 28, 2026
- Critical9.9Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration).Check if you run itEPSS 0.43%May 28, 2026
- Critical9.9Vulnerability in the Oracle iAssets product of Oracle E-Business Suite (component: Internal Operations).Check if you run itEPSS 0.43%May 28, 2026
- Critical9.9Vulnerability in Oracle REST Data Services (component: Core).Check if you run itEPSS 0.43%May 28, 2026
- Medium6.5Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130).Check if you run itEPSS 0.47%May 28, 2026
- High7.9Vulnerability in Oracle REST Data Services (component: Core).Check if you run itEPSS 0.15%May 28, 2026
- Critical9.8Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera).Check if you run itEPSS 0.46%May 28, 2026
- High8.6A configuration weakness in the device’s remote management service allows an authenticated session to be established over a communication channel intended solely for v…Check if you run itEPSS 0.21%May 28, 2026
- Critical9.3A firmware update mechanism in the affected charging controller fails to validate the authenticity of firmware packages delivered through the device's management interface.Check if you run itEPSS 0.27%May 28, 2026
- Medium6.9Music Player Daemon (MPD) before version 0.24.11 contains a CRLF injection vulnerability in the xspf_char_data function within the XSPF playlist plugin that allows att…Check if you run itEPSS 0.44%May 28, 2026
- Medium6.9Music Player Daemon (MPD) before version 0.24.11 contains a server-side request forgery vulnerability in CurlInputPlugin where CURLOPT_FOLLOWLOCATION is set without CU…Check if you run itEPSS 0.48%May 28, 2026
- High8.7Music Player Daemon (MPD) before version 0.24.11 contains a path traversal vulnerability in LocalStorage::MapFSOrThrow and LocalStorage::MapUTF8 within the local stora…Check if you run itEPSS 0.63%May 28, 2026
- High8.8Music Player Daemon (MPD) before version 0.24.11 contains a stack buffer overflow vulnerability in the pcm_unpack_24be function in src/pcm/Pack.cxx that allows unauthe…Check if you run itEPSS 0.68%May 28, 2026
- High8.5Insecure default settings of Portainer CE grant regular (non-admin) users privileges that allow host filesystem access and host-level code execution.Check if you run itEPSS 0.45%May 28, 2026
- Medium6.5Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130).Check if you run itEPSS 0.27%May 28, 2026
- Medium5.3Operation on a Resource after Expiration or Termination (CWE-672) in Kibana can lead to unauthorized information disclosure.Check if you run itEPSS 0.24%May 28, 2026
- High8.7DeepCode through commit c991dc2 contains a path traversal vulnerability in the SPA catch-all route in new_ui/backend/main.py that allows unauthenticated attackers to r…Check if you run itEPSS 0.38%May 28, 2026
- High8.8vllm-project/vllm version 0.14.1 contains a vulnerability where the parameter is hardcoded in two model implementation files ( and ).Check if you run itEPSS 1.00%May 28, 2026
- Low3.3Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling of AF_INET/AF_INET6 socket mediation.Check if you run itEPSS 0.13%May 28, 2026
- Low3.3Ubuntu Linux 6.8 contains SAUCE patches with a possible use of an uninitialized variable in AppArmor AF_INET/AF_INET6 socket mediation code.Check if you run itEPSS 0.13%May 28, 2026
Sort