Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.2CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in…Check if you run itEPSS 0.25%May 12, 2026
- Medium6.2CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Improper Input Validation vulnerability that could result in an applicatio…Check if you run itEPSS 0.26%May 12, 2026
- High7.5CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to applica…Check if you run itEPSS 0.79%May 12, 2026
- Medium4.8Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability…Check if you run itEPSS 0.27%May 12, 2026
- Medium4.3Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Improper Authorization vulnerability that could…Check if you run itEPSS 0.39%May 12, 2026
- Medium4.8Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability…Check if you run itEPSS 0.37%May 12, 2026
- High7.4Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability…Check if you run itEPSS 0.65%May 12, 2026
- High7.5Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Incorrect Authorization vulnerability that coul…Check if you run itEPSS 0.41%May 12, 2026
- High7.5Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Incorrect Authorization vulnerability that coul…Check if you run itEPSS 0.56%May 12, 2026
- Critical9.4An administrative user with access to configure webhooks can execute arbitrary commands by configuring and then triggering webhooks containing specific FreeMarker template syntax.Check if you run itEPSS 0.37%May 12, 2026
- Critical9.2SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the public space that is limited to certain nginx configurations, allowing attackers to…Check if you run itEPSS 0.43%May 12, 2026
- High8.7SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the private space that allows attackers to execute arbitrary code in the context of the web server.Check if you run itEPSS 0.50%May 12, 2026
- Critical9.3Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the…Check if you run itEPSS 0.44%May 12, 2026
- Medium5.3A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauthenticated remote attacker to trigger a denial-of-service condition.Check if you run itEPSS 0.26%May 12, 2026
- High7.2A vulnerability in the configuration processing logic of Access Points running AOS-10 could allow an authenticated remote attacker to execute system commands under cer…Check if you run itEPSS 0.62%May 12, 2026
- Critical9.1Pingvin Share X is a secure and easy self-hosted file sharing platform.Check if you run itEPSS 0.30%May 12, 2026
- Critical9.8Cleanuparr is a tool for automating the cleanup of unwanted or blocked files in Sonarr, Radarr, and supported download clients like qBittorrent.Check if you run itEPSS 0.22%May 12, 2026
- Medium6.1Pocketbase is an open source web backend written in go.Check if you run itEPSS 0.25%May 12, 2026
- High8.2ssrfcheck is a library that checks if a string contains a potential SSRF attack.Check if you run itEPSS 0.23%May 12, 2026
- Medium4.3Kubewarden is a policy engine for Kubernetes.Check if you run itEPSS 0.17%May 12, 2026
- Critical9.3DevGuard provides vulnerability management for the full software supply chain.Check if you run itEPSS 0.26%May 12, 2026
- Medium5.3linux-entra-sso is a browser plugin for Linux to SSO on Microsoft Entra ID.Check if you run itEPSS 0.23%May 12, 2026
- Medium6.5requests-hardened is a library that overrides the default behaviors of the requests library, and adds new security features.Check if you run itEPSS 0.30%May 12, 2026
- Critical9.6Langflow is a tool for building and deploying AI-powered agents and workflows.Check if you run itEPSS 4.20%May 12, 2026
- Medium6.2LobeHub is a work-and-lifestyle space to find, build, and collaborate with agent teammates that grow with you.Check if you run itEPSS 0.27%May 12, 2026
Sort