Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.3Kimai is an open-source time tracking application.Check if you run itEPSS 0.25%May 8, 2026
- Low2.0An Exposed IOCTL with Insufficient Access Control vulnerability in AsusPTPFilter allows a local user to bypass driver security mechanisms and obtain restricted touchpa…Check if you run itEPSS 0.09%May 8, 2026
- Low2.1A vulnerability was determined in Open5GS up to 2.7.7.Check if you run itEPSS 0.37%May 8, 2026
- Low2.1A weakness has been identified in huangjunsen0406 xiaozhi-mcphub up to 1.0.3.Check if you run itEPSS 0.28%May 8, 2026
- Critical9.3Daemon Tools Lite Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 1.46%May 8, 2026
- High8.8Linux Kernel Write-what-where ConditionPatch nowKEVEPSS 94.19%May 8, 2026
- High7.3This vulnerability, in the MAXHUB Pivot client application versions prior to v1.36.2, may allow an attacker to obtain encrypted tenant email addresses and related meta…Check if you run itEPSS 0.16%May 7, 2026
- Low2.1A vulnerability was identified in JeecgBoot up to 3.9.1.Check if you run itEPSS 0.20%May 7, 2026
- Low2.1A vulnerability was determined in 8421bit MiniClaw up to 43905b934cf76489ab28e4d17da28ee97970f91f.Check if you run itEPSS 0.41%May 7, 2026
- Low2.1A vulnerability was found in 8421bit MiniClaw up to 223c16a1088e138838dcbd18cd65a37c35ac5a84.Check if you run itEPSS 3.23%May 7, 2026
- Medium5.1Vvveb before 1.0.8.2 contains an unauthenticated reflected cross-site scripting vulnerability in the visual editor preview renderer that allows attackers to execute ar…Check if you run itEPSS 0.20%May 7, 2026
- Medium6.9Vvveb before 1.0.8.2 contains an information disclosure vulnerability in the cron controller that allows unauthenticated attackers to retrieve the application's secret cron key.Check if you run itEPSS 0.42%May 7, 2026
- Critical10.0Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 1.16%May 7, 2026
- Medium5.5A security vulnerability has been detected in code-projects Feedback System 1.0.Check if you run itEPSS 0.25%May 7, 2026
- High8.5n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations.Check if you run itEPSS 0.21%May 7, 2026
- High8.6Inngest is a platform for running event-driven and scheduled background functions with queueing, retries, and step orchestration.Check if you run itEPSS 0.38%May 7, 2026
- Medium4.7i18nextify is a JavaScript library that adds website internationalization via a script tag, without source code changes.Check if you run itEPSS 0.14%May 7, 2026
- Critical9.1Copilot said: i18nextify is a JavaScript library that adds i18nextify is a JavaScript library that adds website internationalization via a script tag, without source code changes.Check if you run itEPSS 0.31%May 7, 2026
- High8.7BerriAI LiteLLM Command Injection VulnerabilityPatch nowKEVEPSS 91.44%May 7, 2026
- Low1.9A weakness has been identified in OSGeo gdal up to 3.13.0dev-4.Check if you run itEPSS 0.25%May 7, 2026
- Medium5.1manage.get.gov is the .gov TLD registrar maintained by CISA.Check if you run itEPSS 0.40%May 7, 2026
- High7.5A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation.Check if you run itEPSS 0.23%May 7, 2026
- High7.5Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.Check if you run itEPSS 0.80%May 7, 2026
- Medium5.1Saltcorn is an extensible, open source, no-code database application builder.Check if you run itEPSS 0.34%May 7, 2026
- High8.1Budibase is an open-source low-code platform.Check if you run itEPSS 0.28%May 7, 2026
Sort