Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known token with no accompanying = character.Check if you run itEPSS 0.63%May 24, 2026
- High8.7NukeViet CMS is a multi Content Management System.Check if you run itEPSS 0.61%May 22, 2026
- High8.8The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop.Check if you run itEPSS 0.20%May 22, 2026
- High7.1authentik is an open-source identity provider.Check if you run itEPSS 0.56%May 22, 2026
- High7.1TypeBot is a chatbot builder tool.Check if you run itEPSS 0.44%May 22, 2026
- High7.7TypeBot is a chatbot builder tool.Check if you run itEPSS 0.38%May 22, 2026
- Medium5.4TypeBot is a chatbot builder tool.Check if you run itEPSS 0.33%May 22, 2026
- High8.4Missing input source validation in the tool authorization prompt in Kiro CLI before 1.28.0 allows a local attacker to execute arbitrary tools, including shell commands…Check if you run itEPSS 0.18%May 22, 2026
- High7.3An issue in ClipBucket v5 v.5.5.2 allows an attacker to execute arbitrary code via the Authentication interface, login page endpoint and HTTP response security headers componentsCheck if you run itEPSS 0.48%May 22, 2026
- High7.6TypeBot is a chatbot builder tool.Check if you run itEPSS 0.41%May 22, 2026
- Critical9.8Sunshine is a self-hosted game stream host for Moonlight.Check if you run itEPSS 0.43%May 22, 2026
- High8.8An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6 allows a remote unauthenticated attacker to execute arbitrary code.Check if you run itEPSS 1.17%May 22, 2026
- Medium4.3The Widget Context plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.3.Check if you run itEPSS 0.20%May 22, 2026
- Medium6.1The CBX 5 Star Rating & Review plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.0.…Check if you run itEPSS 0.37%May 22, 2026
- Medium4.3The Alfie – Feed Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1.Check if you run itEPSS 0.19%May 22, 2026
- Medium6.1The WP Blockade plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'shortcode' parameter in all versions up to and including 0.9.14.Check if you run itEPSS 0.34%May 22, 2026
- Medium5.3SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate.Check if you run itEPSS 0.50%May 22, 2026
- Critical9.1When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not serialized in the request.Check if you run itEPSS 0.72%May 22, 2026
- High7.5The RSA and DSA public key parsers did not enforce size limits on key parameters.Check if you run itEPSS 0.62%May 22, 2026
- Medium6.5An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process an…Check if you run itEPSS 0.28%May 22, 2026
- Medium6.0Concrete CMS 9.5.0 and below is vulnerable to Reflected XSS in Legacy Pagination via HTML attribute injection.Check if you run itEPSS 0.24%May 21, 2026
- Medium4.3nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation.Check if you run itEPSS 0.40%May 20, 2026
- Critical9.3Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a hard-coded credential vulnerability in the embedded web configuration interface where authentication is…Check if you run itEPSS 0.67%May 20, 2026
- Medium5.1The CSP report endpoint in MISP intended to limit logged CSP reports to 1 KB but incorrectly allowed reports up to 1 MB before truncation.Check if you run itEPSS 0.46%May 20, 2026
- High8.3A vulnerability was identified in the ShadowAttribute proposal creation workflow.Check if you run itEPSS 0.30%May 20, 2026