Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Incorrect Privilege Assignment vulnerability.Check if you run itEPSS 0.09%May 22, 2026
- Medium5.5Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability.Check if you run itEPSS 0.10%May 22, 2026
- Medium6.5Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Improper Certificate Validation vulnerability.Check if you run itEPSS 0.08%May 22, 2026
- High8.2Dell PowerFlex Manager, versions 4.6.2 and prior, contains an Open Redirect Vulnerability.Check if you run itEPSS 0.17%May 22, 2026
- Unknownlinux-fips vulnerabilitiesOpen the advisoryMay 22, 2026
- Medium6.5Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.2, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate the TIFF IFD offset in the image heade…Check if you run itEPSS 0.24%May 22, 2026
- High7.5Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to properly validate msgpack-encoded WebSocket frames before memory…Check if you run itEPSS 0.34%May 22, 2026
- High7.5Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to enforce request body size limits on plugin HTTP endpoints which a…Check if you run itEPSS 0.25%May 22, 2026
- Medium4.3Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate user-supplied input in API request handlers which allows…Check if you run itEPSS 0.25%May 22, 2026
- Medium5.3Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to archive the channel before removing persistent notifications whic…Check if you run itEPSS 0.17%May 22, 2026
- Medium4.3Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to sanitize team member data when returned via API to users without…Check if you run itEPSS 0.18%May 22, 2026
- High7.1Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate file ownership and access control, which allows an authe…Check if you run itEPSS 0.15%May 22, 2026
- Low2.3STER uses unencrypted TCP traffic to transmit data over the network.Check if you run itEPSS 0.21%May 22, 2026
- High7.5The Ditty – Responsive News Tickers, Sliders, and Lists plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.65.Check if you run itEPSS 0.46%May 22, 2026
- Medium4.3The Vedrixa Forms – User Registration Form, Signup Form & Drag & Drop Form Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, an…Check if you run itEPSS 0.22%May 22, 2026
- Medium5.3The MotoPress Hotel Booking plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.0.1.Check if you run itEPSS 0.28%May 22, 2026
- Medium5.4A broken access control vulnerability exists in the TeamViewer DEX Platform (On‑Premises) prior version 9.2.Check if you run itEPSS 0.14%May 22, 2026
- Medium5.4The FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution plugin for WordPress is vulnerable to Blind Server-Side…Check if you run itEPSS 0.69%May 22, 2026
- UnknownDenial of Service and Memory Exhaustion in aesonOpen the advisoryMay 22, 2026
- High8.8The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.5 via…Check if you run itEPSS 0.71%May 22, 2026
- High7.5There is an an information disclosure vulnerability in ZTE MU5250.Check if you run itEPSS 0.22%May 22, 2026
- Medium5.3For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.Check if you run itEPSS 0.41%May 22, 2026
- Critical9.1The in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse constraint but never enforced it.Check if you run itEPSS 0.47%May 22, 2026
- Critical9.1When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not serialized in the request.Check if you run itEPSS 0.68%May 22, 2026
- High7.7A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlyin…Check if you run itEPSS 0.68%May 22, 2026
Sort