Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.6Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via graph container parameter.Check if you run itEPSS 0.27%May 12, 2026
- Critical9.8The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a remote code execution vulnerability in its Kubeflow component.Check if you run itEPSS 0.61%May 12, 2026
- Critical9.8The TinyZero project thru commit 6652a63c57fa7e5ccde3fc9c598c7176ff15b839 (2025-58-24) contains a critical command injection vulnerability (CWE-78) in its HDFS file op…Check if you run itEPSS 1.16%May 12, 2026
- High8.8The superduper project thru v0.10.0 contains a critical remote code execution vulnerability in its query parsing component.Check if you run itEPSS 0.40%May 12, 2026
- High8.8The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the MultitaskClassifier.load() method of the MultitaskClassifier class.Check if you run itEPSS 0.39%May 12, 2026
- High8.8The snorkel library thru v0.10.0 contains a critical insecure deserialization vulnerability (CWE-502) in the BaseLabeler.load() method of the BaseLabeler class.Check if you run itEPSS 0.39%May 12, 2026
- High8.8The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the Trainer.load() method of the Trainer class.Check if you run itEPSS 0.39%May 12, 2026
- High7.8PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism.Check if you run itEPSS 0.39%May 12, 2026
- High8.8The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) is vulnerable…Check if you run itEPSS 0.56%May 12, 2026
- High8.8The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) is vulnerable…Check if you run itEPSS 0.56%May 12, 2026
- Critical9.8The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) allows arbitr…Check if you run itEPSS 0.43%May 12, 2026
- Critical9.1The nexent v1.7.5.2 backend service contains an unauthorized arbitrary storage file deletion vulnerability in its file management API.Check if you run itEPSS 0.40%May 12, 2026
- Critical9.1The nexent v1.7.5.2 backend service contains an unauthorized arbitrary file deletion vulnerability in its ElasticSearch service interface.Check if you run itEPSS 0.41%May 12, 2026
- Critical9.8The torch-checkpoint-shrink.py script in the ml-engineering project in commit 0099885db36a8f06556efe1faf552518852cb1e0 (2025-20-27) contains an insecure deserializatio…Check if you run itEPSS 0.49%May 12, 2026
- High8.8YetAnotherForum.NET (YAF.NET) is a C# ASP.NET forum.Check if you run itEPSS 0.49%May 12, 2026
- High7.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex ('Elixir.Postgrex.Notifications' module) all…Check if you run itEPSS 0.20%May 12, 2026
- Medium5.4A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the File Management module of FluentCMS 1.2.3.Check if you run itEPSS 0.14%May 12, 2026
- Critical9.1sealed-env is a cross-stack, zero-trust secret management library for Node.js and Java/Spring Boot.Check if you run itEPSS 0.33%May 12, 2026
- Medium4.3An attacker can cause uncontrolled memory usage with excessive bracing over IMAP.Check if you run itEPSS 0.62%May 12, 2026
- Medium6.7Dell PowerScale InsightIQ, versions 5.0.0 through 6.2.0, contains an execution with unnecessary privileges vulnerability.Check if you run itEPSS 0.12%May 12, 2026
- Medium4.3Attacker can use the IMAP SETACL command to inject the anyone permission to user's dovecot-acl file even if imap_acl_allow_anyone=no.Check if you run itEPSS 0.26%May 12, 2026
- Medium6.5Attacker can upload a malicious Sieve script over ManageSieve service (or locally) to bypass configured CPU time limits for Sieve up to 130 times of the configured limit.Check if you run itEPSS 0.34%May 12, 2026
- High8.2Dell PowerScale InsightIQ, versions 6.0.0 through 6.2.0, contains an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability.Check if you run itEPSS 0.46%May 12, 2026
- Medium5.3Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS channel binding.Check if you run itEPSS 0.21%May 12, 2026
- Critical9.1When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabling unsafe data to be unescaped.Check if you run itEPSS 0.41%May 12, 2026
Sort