Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations.Check if you run itEPSS 0.05%May 14, 2026
- Low2.6HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields.Check if you run itEPSS 0.11%May 14, 2026
- Medium5.1HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed.Check if you run itEPSS 0.11%May 14, 2026
- Medium5.1HCL AION is affected by a vulnerability where certain operations may trigger out-of-band interactions, potentially resulting in unintended disclosure of sensitive information.Check if you run itEPSS 0.11%May 14, 2026
- High8.6Aegra is a drop-in replacement for LangSmith Deployments.Check if you run itEPSS 0.29%May 14, 2026
- High7.0The RedirectHandler middleware in microsoft/kiota-java (com.microsoft.kiota:microsoft-kiota-http-okHttp v1.9.0) and other Kiota libraries fails to strip sensitive HTTP…Check if you run itEPSS 0.56%May 14, 2026
- High8.6Gotenberg is a Docker-powered stateless API for PDF files.Check if you run itEPSS 0.31%May 14, 2026
- High7.5Gotenberg is a Docker-powered stateless API for PDF files.Check if you run itEPSS 0.35%May 14, 2026
- Medium5.3Gotenberg is a Docker-powered stateless API for PDF files.Check if you run itEPSS 0.31%May 14, 2026
- Medium5.3Gotenberg is a Docker-powered stateless API for PDF files.Check if you run itEPSS 0.19%May 14, 2026
- Medium5.3Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification.Check if you run itEPSS 0.19%May 14, 2026
- Critical9.3PyTorch Lightning is a deep learning framework to pretrain and finetune AI models.Check if you run itEPSS 0.39%May 14, 2026
- Critical9.6soundcloud-rpc is a SoundCloud Client with Discord Rich Presence, Dark Mode, Last.fm and AdBlock support.Check if you run itEPSS 0.34%May 14, 2026
- High7.5Nerdbank.MessagePack is a NativeAOT-compatible MessagePack serialization library.Check if you run itEPSS 0.35%May 14, 2026
- Medium5.9Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.32%May 14, 2026
- Low2.3OpenBao is an open source identity-based secrets management system.Check if you run itEPSS 0.25%May 14, 2026
- High8.6Vvveb before 1.0.8.3 contains an unrestricted file upload vulnerability in the plugin upload endpoint that allows super_admin users to execute arbitrary PHP code by up…Check if you run itEPSS 0.40%May 14, 2026
- High7.1Vvveb before 1.0.8.3 contains an uncontrolled recursion vulnerability in the admin controller dispatch cycle where Base::init() repeatedly invokes permission() on erro…Check if you run itEPSS 0.27%May 14, 2026
- Medium6.9Vvveb before 1.0.8.3 contains a directory listing information disclosure vulnerability that allows unauthenticated attackers to enumerate files and directories by acce…Check if you run itEPSS 0.25%May 14, 2026
- Medium5.3Vvveb before 1.0.8.3 contains a stored cross-site scripting vulnerability in the customer signup flow where the Signup::addUser() controller copies raw POST username v…Check if you run itEPSS 0.22%May 14, 2026
- Medium6.3Remote Code Execution in coleam00 Archon 0.1.0.Check if you run itEPSS 0.31%May 14, 2026
- Medium4.3Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array.Check if you run itEPSS 0.21%May 14, 2026
- High7.5Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AF_UNIX socket to achieve sustained denial of service.Check if you run itEPSS 0.60%May 14, 2026
- High8.8Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin superuser to overwrite local files, e.g.Check if you run itEPSS 0.41%May 14, 2026
- High8.8Authorization bypass through User-Controlled key vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc.Check if you run itEPSS 0.30%May 14, 2026
Sort