Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5BentoML is a Python library for building online serving systems optimized for AI apps and model inference.Check if you run itEPSS 0.28%May 22, 2026
- Medium6.1Devise is an authentication solution for Rails based on Warden.Check if you run itEPSS 0.24%May 22, 2026
- High8.8The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop.Check if you run itEPSS 0.21%May 22, 2026
- High7.1authentik is an open-source identity provider.Check if you run itEPSS 0.46%May 22, 2026
- High8.5TypeBot is a chatbot builder tool.Check if you run itEPSS 0.28%May 22, 2026
- Low3.1TypeBot is a chatbot builder tool.Check if you run itEPSS 0.19%May 22, 2026
- High7.7TypeBot is a chatbot builder tool.Check if you run itEPSS 0.24%May 22, 2026
- Medium5.9HP ENVY 5000 series printers VERBASPP1N003.2237A.00 do not properly manage concurrent TCP connections to port 9100 (JetDirect/RAW printing).Check if you run itEPSS 0.16%May 22, 2026
- High7.3Buffer Overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the chat message functionalityCheck if you run itEPSS 0.43%May 22, 2026
- Medium6.5Directory Traversal vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the UserName parameterCheck if you run itEPSS 0.87%May 22, 2026
- Medium6.1Cross Site Scripting vulnerability in Advantech WebAccess/SCADA 8.0-2015.08.16 allows a remote attacker to obtain sensitive information via the decryption field in the…Check if you run itEPSS 0.26%May 22, 2026
- Medium5.4Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate the OAuth token scope on the callback which allows an au…Check if you run itEPSS 0.14%May 22, 2026
- Medium6.5Typebot is a chatbot builder tool.Check if you run itEPSS 0.32%May 22, 2026
- High8.8Microsoft SharePoint Server Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 80.24%May 22, 2026
- Medium5.4Missing authorization in the entry status management feature in Devolutions Server allows a non-administrator authenticated user to bypass the administrator-enforced P…Check if you run itEPSS 0.19%May 22, 2026
- Medium5.0Improper input validation in the external authentication provider flow in Devolutions Server allows an unauthenticated remote attacker to redirect victims to an attack…Check if you run itEPSS 0.23%May 22, 2026
- High7.1Improper authorization in the Active Directory browsing feature in Devolutions Server allows a low-privileged authenticated user to obtain authentication material asso…Check if you run itEPSS 0.25%May 22, 2026
- High7.5Dell Unisphere for PowerMax vApp version prior to 10.0.0.2, contains an authorization bypass vulnerability in the Unisphere for VMAX application running in vAppCheck if you run itEPSS 0.25%May 22, 2026
- High7.5Dell ECS, versions 3.5 and 3.6, contain an Improper Access Control in the Identity and Access Management (IAM) module.Check if you run itEPSS 0.35%May 22, 2026
- Low2.1Concrete CMS version 9.0 to 9.5.0 is vulnerable to Stored XSS via page name in the Atomik theme.Check if you run itEPSS 0.15%May 22, 2026
- Medium5.5Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the ssh.Check if you run itEPSS 0.07%May 22, 2026
- Medium5.5Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability.Check if you run itEPSS 0.10%May 22, 2026
- Medium6.7Dell VxRail versions before 7.0.200 contain a Plain-text Password Storage Vulnerability in VxRail Manager.Check if you run itEPSS 0.12%May 22, 2026
- Critical9.2shell-quote's function did not validate object-token inputs against the operator model used by .Check if you run itEPSS 0.79%May 22, 2026
- High7.5Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability.Check if you run itEPSS 0.13%May 22, 2026
Sort