Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Missing MinIO policy cleanup on bucket deletion via Apache CloudStack allows users to retain access to buckets which they previously owned.Check if you run itEPSS 0.37%May 8, 2026
- Critical9.2DrayTek Vigor 2960 firmware versions prior to 1.5.1.4 contain an OS command injection vulnerability in the CGI login handler that allows unauthenticated remote attacke…Check if you run itEPSS 1.43%May 8, 2026
- Critical9.3Weak credentials in the CashDro 3 web administration panel, version 24.01.00.26, where the platform allows the use of numeric PINs for user authentication.Check if you run itEPSS 0.32%May 8, 2026
- High8.8The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to Deserialization of Untrus…Check if you run itEPSS 0.95%May 8, 2026
- High8.5PredatorSense version 3.00.3136 to 3.00.3196 contain Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named Pipe that uses a custom protoco…Check if you run itEPSS 0.12%May 8, 2026
- Low3.0In OpenStack Ironic before 35.0.2 (in a certain non-default configuration), instance_info['ks_template'] is rendered without sandboxing.Check if you run itEPSS 0.34%May 8, 2026
- Critical9.9Netgate pfSense CE 2.8.0 allows code execution in the XMLRPC API via pfsense.exec_php.Check if you run itEPSS 0.68%May 8, 2026
- Critical9.1Netgate pfSense CE 2.7.2 allows code execution by using the module installer with a backup file with a serialized PHP object containing the post_reboot_commands property.Check if you run itEPSS 0.81%May 8, 2026
- Critical9.8RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable.Check if you run itEPSS 0.39%May 8, 2026
- Critical9.8Certain GL.iNet devices with 4.x firmware allow authentication bypass (resulting in administrative control of the device) via a username that is both a valid SQL state…Check if you run itEPSS 0.76%May 8, 2026
- High7.3Prison Management System Using PHP v1.0 was discovered to contain a SQL injection vulnerability via the username on the Admin login page.Check if you run itEPSS 0.81%May 8, 2026
- High8.8UltraDAG is a minimal DAG-BFT blockchain in Rust.Check if you run itEPSS 0.38%May 8, 2026
- Medium6.5Onyx is an open-source AI platform.Check if you run itEPSS 0.20%May 8, 2026
- Medium4.3Onyx is an open-source AI platform.Check if you run itEPSS 0.28%May 8, 2026
- Medium5.5A weakness has been identified in CodeAstro Leave Management System 1.0.Check if you run itEPSS 0.25%May 8, 2026
- Medium5.5A vulnerability was identified in SourceCodester SUP Online Shopping 1.0.Check if you run itEPSS 0.25%May 8, 2026
- Medium4.9Kimai is an open-source time tracking application.Check if you run itEPSS 0.28%May 8, 2026
- High7.8electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.Check if you run itEPSS 0.17%May 8, 2026
- Medium5.5electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.Check if you run itEPSS 0.10%May 8, 2026
- Critical9.6electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.Check if you run itEPSS 0.39%May 8, 2026
- High7.8Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service.Check if you run itEPSS 0.30%May 8, 2026
- Medium5.4Kimai is an open-source time tracking application.Check if you run itEPSS 0.22%May 8, 2026
- High7.1PromptHub is an all-in-one AI toolbox for prompt, skill, and agent management.Check if you run itEPSS 0.24%May 8, 2026
- High8.6LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.Check if you run itEPSS 0.37%May 8, 2026
- Medium5.3Nuclei is a vulnerability scanner built on a simple YAML-based DSL.Check if you run itEPSS 0.35%May 8, 2026
Sort