Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Flight is an extensible micro-framework for PHP.Check if you run itEPSS 0.31%May 13, 2026
- Medium4.4Flight is an extensible micro-framework for PHP.Check if you run itEPSS 0.15%May 13, 2026
- Medium6.5A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error.Check if you run itEPSS 0.26%May 13, 2026
- Medium6.1A cross-site scripting (XSS) vulnerability exists in Alinto SOGo, version 5.12.7.Patch nowKEVEPSS 0.43%May 13, 2026
- High8.2Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows denial of service via unbounded buffer accumulation in multipart header parsing.Check if you run itEPSS 0.38%May 13, 2026
- High7.5Netty is an asynchronous, event-driven network application framework.Check if you run itEPSS 0.56%May 13, 2026
- Critical9.1Netty is an asynchronous, event-driven network application framework.Check if you run itEPSS 0.84%May 13, 2026
- Critical9.1Netty is an asynchronous, event-driven network application framework.Check if you run itEPSS 1.01%May 13, 2026
- High7.5Netty is an asynchronous, event-driven network application framework.Check if you run itEPSS 0.41%May 13, 2026
- Medium6.7CKAN is an open-source DMS (data management system) for powering data hubs and data portals.Check if you run itEPSS 0.37%May 13, 2026
- High8.3CKAN is an open-source DMS (data management system) for powering data hubs and data portals.Patch nowKEVEPSS 1.82%May 13, 2026
- Medium6.6CKAN is an open-source DMS (data management system) for powering data hubs and data portals.Check if you run itEPSS 0.19%May 13, 2026
- Medium4.3Protection Mechanism Failure in Zoom Workplace for iOS before version 7.0.0 may allow an authenticated user to conduct a disclosure of information via physical access.Check if you run itEPSS 0.14%May 13, 2026
- Medium6.0Hermes WebUI prior to 0.51.44 contains a path traversal vulnerability in the session import endpoint that allows authenticated attackers to read arbitrary files by imp…Check if you run itEPSS 0.38%May 13, 2026
- Medium5.0An arbitrary File Read and Delete Vulnerability in Palo Alto Networks WildFire® WF-500 and WF-500-B appliances enables users to read sensitive information and delete a…Check if you run itEPSS 0.34%May 13, 2026
- Medium6.2An improper certificate validation vulnerability in the Prisma Access Agent® for Android and Chrome OS enables an attacker to perform a man-in-the-middle (MitM) attack…Check if you run itEPSS 0.19%May 13, 2026
- Medium6.1A SQL injection vulnerability in Trust Protection Foundation allows an authenticated attacker to execute arbitrary SQL commands against the product database.Check if you run itEPSS 0.25%May 13, 2026
- Medium4.5An information disclosure vulnerability in Trust Protection Foundation enables an authenticated attacker to obtain sensitive information from the server's vault.Check if you run itEPSS 0.24%May 13, 2026
- Low1.1A vulnerability in Palo Alto Networks Broker VM allows an authenticated administrator to inject arbitrary content into certain Broker VM fields.Check if you run itEPSS 0.10%May 13, 2026
- High7.3A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing a locally authent…Check if you run itEPSS 0.16%May 13, 2026
- Medium5.8A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to bypass certain access and data control policies.Check if you run itEPSS 0.11%May 13, 2026
- Critical9.8vm2 is an open source vm/sandbox for Node.js.Check if you run itEPSS 0.57%May 13, 2026
- Medium5.8vm2 is an open source vm/sandbox for Node.js.Check if you run itEPSS 0.25%May 13, 2026
- Critical10.0vm2 is an open source vm/sandbox for Node.js.Check if you run itEPSS 0.98%May 13, 2026
- High7.3An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge.Check if you run itEPSS 0.15%May 13, 2026
Sort