Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Summarize prior to 0.15.1 contains a path traversal vulnerability in the /v1/summarize daemon endpoint that allows authenticated callers to write files to arbitrary di…Check if you run itEPSS 0.40%May 18, 2026
- Medium5.3DumbAssets through 1.0.11 contains a stored cross-site scripting vulnerability in asset fields including name, description, modelNumber, serialNumber, and tags that ar…Check if you run itEPSS 0.19%May 18, 2026
- High8.8DumbAssets through 1.0.11 contains a path traversal vulnerability in the POST /api/delete-file endpoint and filesToDelete array parameters that allows unauthenticated…Check if you run itEPSS 0.63%May 18, 2026
- Medium5.7NetBSD prior to commit ec8451e contains a signed integer overflow vulnerability in the cryptodev_op() function in sys/opencrypto/cryptodev.c where the local variable i…Check if you run itEPSS 0.11%May 18, 2026
- Medium5.7NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodev_op() within the opencrypto subsystem that allows local attackers to trigger a doubl…Check if you run itEPSS 0.08%May 18, 2026
- Medium6.1HSC MailInspector 5.3.3-7 is vulnerable to Cross Site Scripting (XSS) in the /police/WarningUrlPage.php endpoint due to improper neutralization of user-supplied input…Check if you run itEPSS 0.19%May 18, 2026
- Medium6.1HSC MailInspector v5.3.3-7 contains a Cross-Site Scripting (XSS) vulnerability in the /tap/tap.php endpoint due to improper neutralization of user-controlled input usi…Check if you run itEPSS 0.24%May 18, 2026
- High7.5HSC MailInspector 5.3.3-7 has a Path Traversal vulnerability due to improper validation of user-supplied input in the /tap/dw.php endpoint.Check if you run itEPSS 2.66%May 18, 2026
- High7.5HSC MailInspector v5.3.3-7 contains a Local File Inclusion (LFI) vulnerability caused by improper control of user-supplied file paths.Check if you run itEPSS 1.53%May 18, 2026
- Critical9.1Incorrect access control in the /uci/get/ endpoint of NOVUS AirGate 4G firmware v1.1.16 allows unauthenticated attackers to obtain administrator credentials via a craf…Check if you run itEPSS 0.24%May 18, 2026
- High8.8Thermo Fisher Scientific Torrent Suite Dx through 5.14.2 has a privilege escalation vulnerability that may allow an authenticated user with limited access privileges t…Check if you run itEPSS 0.26%May 18, 2026
- Medium6.2OpENer v2.3-558-g1e99582 contains an out-of-bounds read vulnerability in the Common Packet Format (CPF) parser, specifically in CreateCommonPacketFormatStructure() in…Check if you run itEPSS 0.11%May 18, 2026
- Medium5.3An issue in Intelbras VIP-1230-D-G4 Version V2.800.00IB00C.0.T allows a remote attacker to obtain sensitive information via password reset functionality under /OutsideCmdCheck if you run itEPSS 0.35%May 18, 2026
- High7.5In tinyMQTT commit 6226ade15bd4f97be2d196352e64dd10937c1962 (2024-02-18), the broker mishandles protocol violations during CONNECT packet parsing.Check if you run itEPSS 0.28%May 18, 2026
- High8.2Dify before version 1.14.2 contains an authorization bypass vulnerability in the file preview endpoint that allows any authenticated user to read up to 3,000 character…Check if you run itEPSS 0.43%May 18, 2026
- Critical9.3dify dify Relative Path TraversalPatch nowKEVEPSS 22.71%May 18, 2026
- Critical9.3Dify before version 1.14.2 contains an authorization bypass vulnerability that allows authenticated editor users to set and enable trace configurations for any applica…Check if you run itEPSS 5.97%May 18, 2026
- High7.5An issue in prestashop upsshipping all versions through at least 2.4.0 allows a remote attacker to obtain sensitive information via the /modules/upsshipping/logs/, and…Check if you run itEPSS 0.31%May 18, 2026
- Medium6.3A flaw has been found in opensourcepos Open Source Point of Sale up to 3.4.2.Check if you run itEPSS 0.18%May 18, 2026
- Critical9.8SGLangs multimodal generation runtime scheduler's ROUTER socket binds to 0.0.0.0 by default and contains a sink that calls pickle.loads() on incoming messages, enablin…Check if you run itEPSS 0.40%May 18, 2026
- Critical9.3Authorization Bypass vulnerability in Creartia's ICMS software could allow an attacker to gain unauthorized access to protected features by manipulating the HTTP redir…Check if you run itEPSS 0.25%May 18, 2026
- Medium6.8Dell Live Optics Windows and Personal Edition collectors contain an improper certificate validation vulnerability.Check if you run itEPSS 0.14%May 18, 2026
- High7.6Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to sanitize sensitive configuration fields in the Mattermost Calls plugin which allows…Check if you run itEPSS 0.27%May 18, 2026
- High8.7Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to sanitize sensitive configuration fields before including them in support packet gen…Check if you run itEPSS 0.30%May 18, 2026
- Medium6.5Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail prevent disclosure of created user password which allows a malicious attacker to imper…Check if you run itEPSS 0.23%May 18, 2026
Sort