Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session ids.Check if you run itEPSS 0.24%May 15, 2026
- Medium6.8Out-of-bounds write vulnerability in the distributed file system module.Check if you run itEPSS 0.13%May 15, 2026
- Medium5.9Permission control vulnerability in the manufacturability design module.Check if you run itEPSS 0.08%May 15, 2026
- Medium5.9Permission control vulnerability in the manufacturability design module.Check if you run itEPSS 0.08%May 15, 2026
- Medium5.6Use-After-Free (UAF) vulnerability in the web.Check if you run itEPSS 0.13%May 15, 2026
- High8.4Permission control vulnerability in the web.Check if you run itEPSS 0.07%May 15, 2026
- Low2.8Stack overflow vulnerability in the media platform.Check if you run itEPSS 0.08%May 15, 2026
- Medium5.9Permission control vulnerability in contacts.Check if you run itEPSS 0.08%May 15, 2026
- Medium5.8Permission control vulnerability in calls.Check if you run itEPSS 0.09%May 15, 2026
- Medium4.3The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized access in all versions up to, and inc…Check if you run itEPSS 0.27%May 15, 2026
- High7.5The Quick Playground plugin for WordPress is vulnerable to Path Traversal in versions up to and including 1.3.3.Check if you run itEPSS 0.81%May 15, 2026
- High8.8The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 3.28.36.Patch nowKEVEPSS 0.44%May 15, 2026
- Critical9.8The Form Notify plugin for WordPress is vulnerable to Authentication Bypass in versions up to and including 1.1.10.Check if you run itEPSS 0.73%May 15, 2026
- High8.1The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the 'admin_h…Check if you run itEPSS 0.27%May 15, 2026
- High7.0VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an operation performed by a SETUID binary.Check if you run itEPSS 0.16%May 15, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate inherited ACE SID length smb_inherit_dacl() walks the parent directory DACL loaded…Check if you run itEPSS 0.41%May 15, 2026
- Medium4.8Cross-site scripting vulnerability exists in Musetheque V4 Information Disclosure for IPKNOWLEDGE V4L1 rev2203.0 and earlier.Check if you run itEPSS 0.13%May 15, 2026
- Critical9.2Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configurat…Check if you run itEPSS 0.31%May 15, 2026
- High8.8Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space o…Check if you run itEPSS 0.10%May 15, 2026
- Low1.8An out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of established bounds potentially re…Check if you run itEPSS 0.10%May 15, 2026
- High8.5Rapid7 Metasploit Pro is vulnerable to a local privilege escalation attack that allows a user to gain SYSTEM level control of a Windows host.Check if you run itEPSS 0.17%May 15, 2026
- High8.6lfprojects mlflow Authentication Bypass by Primary WeaknessPatch nowKEVEPSS 20.78%May 15, 2026
- Medium4.6Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virtual machine (VM) to access these shared resourc…Check if you run itEPSS 0.11%May 15, 2026
- Medium5.3Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an input value to a function without sufficient privi…Check if you run itEPSS 0.21%May 15, 2026
- Medium6.9Use of uninitialized resource within the AMD Platform Management Framework (PMF) could allow an attacker to read a uninitialized kernel memory resulting in loss of con…Check if you run itEPSS 0.10%May 15, 2026
Sort