Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.8An out of bounds read within the AMD Platform Management Framework (PMF) could allow an attacker to trigger a read of an arbitrary memory location potentially resultin…Check if you run itEPSS 0.10%May 15, 2026
- High8.4Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary memory pages potentially impacting integrity an…Check if you run itEPSS 0.10%May 15, 2026
- High8.4An out of bounds write within the AMD Platform Management Framework (PMF) could allow an attacker to execute arbitrary code at an elevated privilege level potentially…Check if you run itEPSS 0.11%May 15, 2026
- Medium4.8An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial loss of confidentiality and availability.Check if you run itEPSS 0.10%May 15, 2026
- High8.3An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify an arbitrary address potentially resulting in lo…Check if you run itEPSS 0.10%May 15, 2026
- High8.6Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arb…Check if you run itEPSS 0.11%May 15, 2026
- High7.1Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the…Check if you run itEPSS 0.10%May 15, 2026
- Medium6.8Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting table data from SMU t…Check if you run itEPSS 0.11%May 15, 2026
- Medium5.4A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory.Check if you run itEPSS 0.14%May 15, 2026
- Medium6.9Hedera Guardian through 3.5.1 contains an authentication bypass vulnerability in the GET /api/v1/demo/registered-users endpoint that allows unauthenticated attackers t…Check if you run itEPSS 0.36%May 14, 2026
- High7.5ZITADEL is an open source identity management platform.Check if you run itEPSS 0.48%May 14, 2026
- Low2.1The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.Check if you run itEPSS 0.22%May 14, 2026
- None0.0The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.Check if you run itEPSS 0.41%May 14, 2026
- Low3.5The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.Check if you run itEPSS 0.21%May 14, 2026
- High8.7Elixir WebRTC is an Elixir implementation of the W3C WebRTC API.Check if you run itEPSS 0.26%May 14, 2026
- Medium6.9Tuist is a virtual platform team for Swift app devs.Check if you run itEPSS 0.29%May 14, 2026
- High7.1Tuist is a virtual platform team for Swift app devs.Check if you run itEPSS 0.23%May 14, 2026
- High7.5libyang is a YANG data modeling language library.Check if you run itEPSS 0.64%May 14, 2026
- Medium5.1rust-openssl provides OpenSSL bindings for the Rust programming language.Check if you run itEPSS 0.17%May 14, 2026
- Medium4.7python-utcp is the python implementation of UTCP.Check if you run itEPSS 0.18%May 14, 2026
- Medium6.3The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.Check if you run itEPSS 0.29%May 14, 2026
- Medium5.1The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.Check if you run itEPSS 0.17%May 14, 2026
- Critical9.3PrestaShop is an open source e-commerce web application.Check if you run itEPSS 0.43%May 14, 2026
- High8.7rust-openssl provides OpenSSL bindings for the Rust programming language.Check if you run itEPSS 0.21%May 14, 2026
- Critical9.3Crabbox prior to v0.12.0 contains an environment variable exposure vulnerability that allows attackers with access to a malicious or compromised repository to forward…Check if you run itEPSS 0.95%May 14, 2026
Sort