Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8NVIDIA BioNemo for Linux contains a vulnerability where a user could cause a deserialization of untrusted data.Check if you run itEPSS 0.29%May 20, 2026
- High7.5NVIDIA TensorRT contains a vulnerability where an attacker could cause an out-of-bounds write.Check if you run itEPSS 0.39%May 20, 2026
- Critical9.3XWiki Platform is a generic wiki platform.Check this weekEPSS 18.53%May 20, 2026
- Medium6.1Cross-Site Scripting (XSS) vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitrary JavaScript via a crafted .txt file.Check if you run itEPSS 0.30%May 20, 2026
- Medium6.5In Splunk Enterprise versions below 10.2.2 and 10.0.5, and Splunk Cloud Platform versions below 10.3.2512.8, 10.2.2510.11, 10.1.2507.21, and 10.0.2503.13, a user with…Check if you run itEPSS 0.48%May 20, 2026
- Medium6.5In Splunk AI Toolkit versions below 5.7.3, a low-privileged user that does not hold the 'admin' or 'power' roles could access confidential data that was restricted thr…Check if you run itEPSS 0.32%May 20, 2026
- Medium6.3A vulnerability in the BrowserBot component of Cisco ThousandEyes Enterprise Agent could have allowed an authenticated, remote attacker to execute arbitrary commands o…Check if you run itEPSS 0.42%May 20, 2026
- Medium6.0MISP’s OIDC authentication plugin allowed automatic linking of an OIDC identity to an existing local user account based on the email claim when the local account had n…Check if you run itEPSS 0.18%May 20, 2026
- High7.5Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability.Check if you run itEPSS 0.35%May 20, 2026
- Medium4.1Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that allows attackers to cause incorrect Bitcoin addresses to be displayed by e…Check if you run itEPSS 0.14%May 20, 2026
- Critical9.5Code Injection vulnerability in phenixdigital phoenix_storybook allows unauthenticated remote code execution via unsanitized attribute value interpolation in HEEx temp…Check if you run itEPSS 2.11%May 20, 2026
- High8.7Twig versions 2.16.x and 3.9.0 through 3.25.x contain a sandbox bypass vulnerability when using a SourcePolicyInterface that allows attackers with template rendering c…Check if you run itEPSS 0.76%May 20, 2026
- High7.8A heap-based buffer overflow vulnerability exists in the Channel Splitting functionality of MediaInfoLib (version(s): 26.01).Check if you run itEPSS 0.25%May 20, 2026
- Medium6.5The HCL DominoIQ RAG feature is affected by a Broken Access Control vulnerability.Check if you run itEPSS 0.26%May 20, 2026
- High7.5Multiple flaws have been identified in related to the handling of DNS messages whose CLASS is not Internet ( ) — for example, or , or DNS messages that specify meta-cl…Check if you run itEPSS 1.94%May 20, 2026
- High7.3Rsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in daemon file handling that allows attackers to redirect file writes outsid…Check if you run itEPSS 0.15%May 20, 2026
- Low2.3Insufficient Verification of Data Authenticity in the feedback function of Mesalvo MEONA (MEONA Client and MEONA Server).Check if you run itEPSS 0.09%May 20, 2026
- High7.8Improper Access Control vulnerability in Mesalvo MEONA (MEONA Client and MEONA Server) allows an authenticated MEONA user to access administrative functions of the MEO…Check if you run itEPSS 0.13%May 20, 2026
- High7.5A flaw was found in 389-ds-base.Check if you run itEPSS 0.81%May 20, 2026
- Medium4.6NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a locking inconsistency vulnerability that when certain conditions are met (multi-threaded, RPZ XFR re…Check if you run itEPSS 0.26%May 20, 2026
- Medium6.9NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability when handling replies with very large RRsets that Unbound needs to perform name compression for.Check if you run itEPSS 0.65%May 20, 2026
- Medium5.7NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to poisoning via promiscuous records for the authority section.Check if you run itEPSS 0.26%May 20, 2026
- High8.7NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that can lead to a crash given malicious upstream replies.Check if you run itEPSS 0.81%May 20, 2026
- High8.7NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when encoding multiple NSID and/or DNS Cookie EDNS and/o…Check if you run itEPSS 0.84%May 20, 2026
- Medium6.9NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the DNSSEC validator where the code path to consult the negative cache for DS records does…Check if you run itEPSS 0.34%May 20, 2026
Sort