Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Race in Speech in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information f…Check if you run itEPSS 0.18%May 6, 2026
- Medium5.3Uninitialized Use in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive inf…Check if you run itEPSS 0.24%May 6, 2026
- Medium6.5Uninitialized Use in Dawn in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.Check if you run itEPSS 0.24%May 6, 2026
- High8.7Vvveb before version 1.0.8.2 contains an unrestricted file upload vulnerability in the media upload handler that allows authenticated users with media-upload permissio…Check if you run itEPSS 0.54%May 6, 2026
- High8.6Vvveb before version 1.0.8.2 contains an XML external entity (XXE) injection vulnerability in the admin Tools/Import feature that allows authenticated site_admin users…Check if you run itEPSS 0.27%May 6, 2026
- High8.7Vvveb before version 1.0.8.2 contains an authenticated remote code execution vulnerability in the admin code editor that allows low-privilege authenticated users to ex…Check if you run itEPSS 0.55%May 6, 2026
- Medium6.9Vvveb before version 1.0.8.2 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain sensitive server information by triggerin…Check if you run itEPSS 0.25%May 6, 2026
- Critical9.2Vvveb before version 1.0.8.2 contains a hard-coded credentials vulnerability in its docker-compose-apache.yaml configuration that allows unauthenticated attackers to a…Check if you run itEPSS 0.35%May 6, 2026
- High7.5Unauthenticated DoS in ZTE H8102E, H168N, H167A, H199A, H288A, H198A, H267A, H267N, H268A, H388X, H196A, H369A, H268N, H208N, H367N, H181A, and H196Q.Check if you run itEPSS 2.38%May 6, 2026
- High8.3HCL BigFix Service Management (SX) is affected by a Broken Access Control vulnerability leading to privilege escalation.Check if you run itEPSS 0.25%May 6, 2026
- High8.7In versions 3.0.0a1 through 3.2.0 of Mistune, there is a ReDoS (Regular Expression Denial of Service) vulnerability in that allows an attacker who can supply Markdown…Check if you run itEPSS 0.53%May 6, 2026
- Critical9.0### Summary A SQL injection vulnerability exists in Rucio versions 1.30.0 and later before 35.8.5, 38.5.5, 39.4.2, and 40.1.1, in .Check if you run itEPSS 0.30%May 6, 2026
- Critical9.3NanoClaw version 1.2.0 and prior contains a host/container filesystem boundary vulnerability in outbound attachment handling and outbox cleanup that allows a compromis…Check if you run itEPSS 0.15%May 6, 2026
- Critical9.4A SQL injection vulnerability in allows any authenticated Rucio user to execute arbitrary SQL against the backend database through the DID search endpoint ( ).Check if you run itEPSS 0.28%May 6, 2026
- Medium4.3A vulnerability in the RADIUS Policy API endpoints of Cisco ISE could allow an authenticated, remote attacker with read-only Administrator privileges to gain unauthori…Check if you run itEPSS 0.22%May 6, 2026
- None0.0Following the initial publication of the Security Advisory about a denial of service (DoS) condition in Cisco Crosswork Network Controller and Cisco Network Services O…Check if you run itEPSS 0.31%May 6, 2026
- Medium4.3A vulnerability in the Lite Agent feature of Cisco Enterprise Chat and Email (ECE) could allow an authenticated, remote attacker to conduct browser-based attacks.Check if you run itEPSS 0.13%May 6, 2026
- Medium6.8Velociraptor versions prior to 0.76.4 contain a cross organization authorization bypass in the HTTP API.Check if you run itEPSS 0.24%May 6, 2026
- Low2.9A vulnerability was detected in FlowiseAI Flowise up to 3.0.12.Check if you run itEPSS 0.40%May 6, 2026
- Medium5.3A weakness has been identified in FlowiseAI Flowise up to 3.0.12.Check if you run itEPSS 0.29%May 6, 2026
- Medium5.3HCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified.Check if you run itEPSS 0.17%May 6, 2026
- Low3.5HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images.Check if you run itEPSS 0.14%May 6, 2026
- Medium6.3A security flaw has been discovered in FlowiseAI Flowise up to 3.0.12.Check if you run itEPSS 0.26%May 6, 2026
- Critical9.1Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure.Check if you run itEPSS 0.30%May 6, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() Although it is guided that must be a…Check if you run itEPSS 0.12%May 6, 2026
Sort