Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2A vulnerability in the command line interface of Access Points running AOS-10 and AOS-8 Instant could allow an authenticated remote attacker to execute system commands…Check if you run itEPSS 0.56%May 12, 2026
- Critical9.1The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implem…Check if you run itEPSS 0.50%May 12, 2026
- Medium6.5The mem0 1.0.0 server lacks authentication and authorization controls for its memory reset and table re-creation functionality accessible via the DELETE /memories endpoint.Check if you run itEPSS 0.53%May 12, 2026
- Critical9.1The mem0 v1.0.0 server lacks authentication and authorization controls for its memory reset functionality accessible via the DELETE /memories endpoint.Check if you run itEPSS 0.74%May 12, 2026
- Medium6.8Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Processors within VMX non-r…Check if you run itEPSS 0.10%May 12, 2026
- Critical9.8The TinyZero project thru commit 6652a63c57fa7e5ccde3fc9c598c7176ff15b839 (2025-58-24) contains a critical command injection vulnerability (CWE-78) in its HDFS file op…Check if you run itEPSS 2.13%May 12, 2026
- High8.8The superduper project thru v0.10.0 contains a critical remote code execution vulnerability in its query parsing component.Check if you run itEPSS 0.70%May 12, 2026
- Critical9.8PySyft (Syft Datasite/Server) versions 0.9.5 and earlier are vulnerable to remote code execution due to insufficient validation and sandboxing of user-submitted code.Check if you run itEPSS 1.20%May 12, 2026
- Critical9.1sealed-env is a cross-stack, zero-trust secret management library for Node.js and Java/Spring Boot.Check if you run itEPSS 0.40%May 12, 2026
- High8.8A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0).Check if you run itEPSS 0.30%May 12, 2026
- High8.9A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versio…Check if you run itEPSS 0.67%May 12, 2026
- Medium6.1A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versio…Check if you run itEPSS 0.40%May 12, 2026
- High7.7A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versio…Check if you run itEPSS 0.54%May 12, 2026
- High8.8** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attac…Check if you run itEPSS 2.69%May 12, 2026
- Medium4.3Due to insufficient authorization checks in the SAP Incentive and Commission Management application, authenticated users could invoke a remote-enabled function module…Check if you run itEPSS 0.26%May 12, 2026
- High8.2Due to an OS Command Execution vulnerability in SAP Forecasting & Replenishment, an authenticated attacker with administrative authorizations could abuse a non-remote-…Check if you run itEPSS 0.24%May 12, 2026
- High8.1Vaultwarden is a Bitwarden-compatible server written in Rust.Check if you run itEPSS 0.31%May 11, 2026
- High8.2Outline is a service that allows for collaborative documentation.Check if you run itEPSS 0.30%May 11, 2026
- High8.8Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software.Check if you run itEPSS 0.19%May 11, 2026
- Critical9.4oxyno-zeta/s3-proxy is an aws s3 proxy written in go.Check if you run itEPSS 0.72%May 11, 2026
- Medium4.9External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets.Check if you run itEPSS 0.26%May 11, 2026
- Medium5.3External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets.Check if you run itEPSS 0.37%May 11, 2026
- Critical10.0SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs.Check if you run itEPSS 0.78%May 11, 2026
- Medium5.5A security flaw has been discovered in VectifyAI PageIndex up to f50e52975313c6716c02b20a119577a1929decba.Check if you run itEPSS 0.64%May 11, 2026
- Medium6.8Crabbox before 0.9.0 contains a path traversal vulnerability in the Islo provider's workspace path resolution that allows attackers to supply absolute or relative path…Check if you run itEPSS 0.19%May 11, 2026