Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin superuser to overwrite local files, e.g.Check if you run itEPSS 0.32%May 14, 2026
- High8.8Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds.Check if you run itEPSS 1.01%May 14, 2026
- Critical9.1OPNsense is a FreeBSD based firewall and routing platform.Check if you run itEPSS 0.82%May 13, 2026
- Critical9.1OPNsense is a FreeBSD based firewall and routing platform.Check if you run itEPSS 0.82%May 13, 2026
- Critical9.1CubeCart is an ecommerce software solution.Check if you run itEPSS 0.54%May 13, 2026
- Medium6.9PyQuorum is a cryptographic library for secret sharing and key management.Check if you run itEPSS 0.53%May 13, 2026
- Medium4.9Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and pot…Check if you run itEPSS 0.11%May 13, 2026
- Medium5.9Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent® allow a local attacker to bypass authentication controls and execut…Check if you run itEPSS 0.15%May 13, 2026
- High8.5GitHub Copilot CLI brings AI-powered coding assistance directly to your command line.Check if you run itEPSS 0.38%May 13, 2026
- High8.9urllib3 is an HTTP client library for Python.Check if you run itEPSS 0.88%May 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: liveupdate: luo_file: remember retrieve() status LUO keeps track of successful retrieve attempts on…Check if you run itEPSS 0.14%May 13, 2026
- Medium6.5A path injection vulnerability exists in OpenPLC v3 (2c82b0e79c53f8c1f1458eee15fec173400d6e1a) as the binary program compiled from glue_generator.cpp does not perform…Check if you run itEPSS 0.46%May 13, 2026
- Medium5.1ELECOM wireless LAN access point devices implement CSRF protection mechanism, but with inadequate handling of CSRF tokens.Check if you run itEPSS 0.29%May 13, 2026
- Critical9.3ELECOM wireless LAN access point devices do not require authentication to access some specific URLs.Check if you run itEPSS 0.72%May 13, 2026
- High7.5libcurl might in some circumstances reuse the wrong connection for SMB(S) transfers.Check if you run itEPSS 0.66%May 13, 2026
- Medium6.5libcurl might in some circumstances reuse the wrong connection when asked to do an authenticated HTTP(S) request after a Negotiate-authenticated one, when both use the same host.Check if you run itEPSS 0.41%May 13, 2026
- Medium5.3The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to and including 3.9.9.Check if you run itEPSS 0.53%May 13, 2026
- Medium5.3Using a densely populated chars mask and a large input string in the MongoDB aggregation operators $trim, $ltrim, and $rtrim, an authenticated user with aggregation pe…Check if you run itEPSS 0.45%May 13, 2026
- High7.2A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to inject arbitrary operating system commands through unsa…Check if you run itEPSS 0.82%May 12, 2026
- High7.2A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to bypass a front-end restriction on OS Script schedule ty…Check if you run itEPSS 0.83%May 12, 2026
- High8.8Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems.Check if you run itEPSS 1.42%May 12, 2026
- High8.1efw4.X is an Enterprise Framework for Web.Check if you run itEPSS 0.40%May 12, 2026
- Medium6.9PowerSYSTEM Center REST API endpoint for devices allows a low privilege authenticated user to access information normally limited by operational permissions.Check if you run itEPSS 0.22%May 12, 2026
- Medium4.9A vulnerability exists in the web-based management interface of an AOS-10 Gateway that could allow an authenticated remote attacker to access sensitive files on the un…Check if you run itEPSS 0.51%May 12, 2026
- High7.2A command injection vulnerability exists in the web-based management interface of AOS-8 and AOS-10 Operating Systems.Check if you run itEPSS 1.22%May 12, 2026