Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.0Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments.Check if you run itEPSS 0.38%May 28, 2026
- High7.7Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments.Check if you run itEPSS 0.46%May 28, 2026
- High8.5Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments.Check if you run itEPSS 0.30%May 28, 2026
- Critical9.4Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments.Check if you run itEPSS 0.45%May 28, 2026
- Critical9.4Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments.Check if you run itEPSS 0.45%May 28, 2026
- Critical9.9Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration).Check if you run itEPSS 0.43%May 28, 2026
- High8.6Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.44%May 28, 2026
- High8.6A configuration weakness in the device’s remote management service allows an authenticated session to be established over a communication channel intended solely for v…Check if you run itEPSS 0.21%May 28, 2026
- High8.5Insecure default settings of Portainer CE grant regular (non-admin) users privileges that allow host filesystem access and host-level code execution.Check if you run itEPSS 0.51%May 28, 2026
- High7.3A path traversal vulnerability was identified in Kibana's dashboard management functionality.Check if you run itEPSS 0.24%May 28, 2026
- High7.5Automad is a flat-file content management system and template engine.Check if you run itEPSS 1.43%May 28, 2026
- High8.8RustFS is a distributed object storage system built in Rust.Check if you run itEPSS 0.54%May 28, 2026
- Critical9.8RustFS is a distributed object storage system built in Rust.Check if you run itEPSS 0.48%May 28, 2026
- High8.8An issue was discovered in OpenStack Keystone before 29.0.2.Check if you run itEPSS 0.43%May 28, 2026
- High7.3An arbitrary file upload vulnerability in the pages/admin.uploadmapimg.php component of SourceBans Material Admin v1.1.6 allows attackers to execute arbitrary code via…Check if you run itEPSS 0.49%May 28, 2026
- High7.3An issue in SourceBans Material Admin before v.1.1.6 (3ecd95e) allows attackers to manipulate arbitrary user data in the web app via a crafted XAJAX call.Check if you run itEPSS 0.42%May 28, 2026
- Medium5.1Kuma is a modern Envoy-based service mesh that can run on every cloud across both Kubernetes and VMs.Check if you run itEPSS 0.30%May 28, 2026
- Critical9.1In Casdoor versions 2.362.0 and earlier, the SAML callback handler in controllers/auth.go accepts any well-formed SAMLResponse sent to /api/acs without verifying that…Check if you run itEPSS 0.21%May 28, 2026
- Critical9.8Casdoor versions 2.362.0 and earlier do not verify that a JWT used for token exchange is still active.Check if you run itEPSS 0.48%May 28, 2026
- High8.1Casdoor versions 2.362.0 and earlier map SAML assertions to user sessions without replay protection.Check if you run itEPSS 0.37%May 28, 2026
- High8.7Due to improper enforcement of authentication rate-limiting on a debug SSH service in Archer C64 v1, the SSH service allows unlimited authentication attempts and uses…Check if you run itEPSS 0.40%May 28, 2026
- Medium6.0When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to th…Check if you run itEPSS 0.34%May 28, 2026
- Critical9.8A command injection vulnerability exists in the Admin Access feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR61…Check if you run itEPSS 1.77%May 28, 2026
- High8.8phpMyFAQ before 4.1.3 contains an authentication bypass vulnerability in the password reset endpoint that allows unauthenticated attackers to reset any user account pa…Check if you run itEPSS 0.46%May 28, 2026
- High8.7phpMyFAQ before 4.1.3 contains an insecure direct object reference vulnerability in the admin API user password endpoint that allows authenticated administrators to ch…Check if you run itEPSS 0.44%May 28, 2026