Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of…Check if you run itEPSS 0.14%May 12, 2026
- High7.8Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of…Check if you run itEPSS 0.14%May 12, 2026
- Critical9.1The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implem…Check if you run itEPSS 0.48%May 12, 2026
- Medium4.3A tampering vulnerability exists when .NET Core improperly handles specially crafted files.Check if you run itEPSS 0.71%May 12, 2026
- Critical9.8The mamba language model framework thru 2.2.6 is vulnerable to insecure deserialization (CWE-502) when loading pre-trained models from HuggingFace Hub.Check if you run itEPSS 0.41%May 12, 2026
- Critical9.8The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument.Check if you run itEPSS 0.33%May 12, 2026
- Critical9.8The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module.Check if you run itEPSS 0.47%May 12, 2026
- Critical9.8Horovod thru 0.28.1 contains an insecure deserialization vulnerability (CWE-502) in its KVStore HTTP server component.Check if you run itEPSS 0.69%May 12, 2026
- Critical9.8Guardrails AI thru 0.6.7 contains a code injection vulnerability (CWE-94) in its Hub package installation mechanism.Check if you run itEPSS 0.64%May 12, 2026
- High8.8The CosyVoice project thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its model loading process.Check if you run itEPSS 0.46%May 12, 2026
- Critical9.8Cognee thru v0.4.0 contains a critical remote code execution vulnerability in its notebook cell execution API endpoint.Check if you run itEPSS 0.64%May 12, 2026
- Critical9.8The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection vulnerability in its Kubeflow component (robustness_evaluation_fgsm_pytorch.py).Check if you run itEPSS 0.55%May 12, 2026
- Critical9.8The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains an insecure deserialization vulnerability (CWE-502) in its Kubeflow component's model loading functionality.Check if you run itEPSS 0.60%May 12, 2026
- High8.5Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow an escalation of privilege.Check if you run itEPSS 0.11%May 12, 2026
- High8.5Out-of-bounds write for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a escalation of privilege.Check if you run itEPSS 0.11%May 12, 2026
- High7.2An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3…Check if you run itEPSS 0.36%May 12, 2026
- Medium4.3Missing authorization in the PAM module in Devolutions Server allows an authenticated user with a PAM license but no additional permissions to obtain OTP secret keys a…Check if you run itEPSS 0.20%May 12, 2026
- High8.2JunoClaw is an agentic AI platform built on Juno Network.Check if you run itEPSS 0.23%May 12, 2026
- Critical9.8JunoClaw is an agentic AI platform built on Juno Network.Check if you run itEPSS 0.22%May 12, 2026
- High8.4JunoClaw is an agentic AI platform built on Juno Network.Check if you run itEPSS 0.17%May 12, 2026
- High8.4JunoClaw is an agentic AI platform built on Juno Network.Check if you run itEPSS 0.15%May 12, 2026
- High8.5JunoClaw is an agentic AI platform built on Juno Network.Check if you run itEPSS 0.15%May 12, 2026
- Medium6.8Null pointer dereference for some Intel(R) QAT software drivers for Windows before version 2.6.0 within Ring 3: User Applications may allow a denial of service.Check if you run itEPSS 0.10%May 12, 2026
- Medium6.9Improper input validation for some Intel(R) QAT software drivers for Windows before version 2.6 within Ring 3: User Applications may allow a denial of service.Check if you run itEPSS 0.10%May 12, 2026
- High8.8Improper access control for some Intel Vision software for all versions within Ring 3: User Applications may allow a denial of service.Check if you run itEPSS 0.46%May 12, 2026
Sort