Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems.Check if you run itEPSS 1.42%May 12, 2026
- Low3.7ciguard is a static security auditor for CI/CD pipelines.Check if you run itEPSS 0.31%May 12, 2026
- Medium5.5A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.2 all versions may allow attacker to infor…Check if you run itEPSS 0.14%May 12, 2026
- High8.0Cleanuparr is a tool for automating the cleanup of unwanted or blocked files in Sonarr, Radarr, and supported download clients like qBittorrent.Check if you run itEPSS 0.19%May 12, 2026
- Critical9.8Cleanuparr is a tool for automating the cleanup of unwanted or blocked files in Sonarr, Radarr, and supported download clients like qBittorrent.Check if you run itEPSS 0.33%May 12, 2026
- High7.5phpseclib is a PHP secure communications library.Check if you run itEPSS 0.34%May 12, 2026
- High8.8AntSword is a cross-platform website management toolkit.Check if you run itEPSS 0.45%May 12, 2026
- High7.5OpenTelemetry.OpAmp.Client is the OpAMP client for OpenTelemetry .NET.Check if you run itEPSS 0.41%May 12, 2026
- Critical9.3DevGuard provides vulnerability management for the full software supply chain.Check if you run itEPSS 0.43%May 12, 2026
- Medium6.2LobeHub is a work-and-lifestyle space to find, build, and collaborate with agent teammates that grow with you.Check if you run itEPSS 0.35%May 12, 2026
- High7.0Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.26%May 12, 2026
- Medium5.4Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.68%May 12, 2026
- Critical9.8The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument.Check if you run itEPSS 0.46%May 12, 2026
- Critical9.8The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection vulnerability in its Kubeflow component (robustness_evaluation_fgsm_pytorch.py).Check if you run itEPSS 0.80%May 12, 2026
- Critical9.1Insufficient ownership check in allows an authenticated client area user to submit requests using another user’s without any ownership validation leading to unauthoriz…Check if you run itEPSS 0.45%May 12, 2026
- Medium6.7An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAP 7.6.0 through 7.6.2, FortiAP 7.4.0 thro…Check if you run itEPSS 0.56%May 12, 2026
- Medium6.7An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability [CWE-78] vulnerability in Fortinet FortiAP 7.6.0 through 7.…Check if you run itEPSS 0.56%May 12, 2026
- Critical9.6External control of a file name in Ivanti Xtraction before version 2026.2 allows a remote authenticated attacker to read sensitive files and write arbitrary HTML files…Check if you run itEPSS 1.15%May 12, 2026
- High7.0A race condition in Ivanti Secure Access Client before 22.8R6 allows a locally authenticated user to escalate privileges to SYSTEMCheck if you run itEPSS 0.38%May 12, 2026
- Medium4.4An incorrect permission assignment for critical resource of Ivanti Secure Access Client before 22.8R6 allows a local authenticated user to read or modify sensitive log…Check if you run itEPSS 0.24%May 12, 2026
- High8.5Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services.Check if you run itEPSS 0.36%May 12, 2026
- High8.2Open-WebSearch is a multi-engine MCP server, CLI, and local daemon for agent web search and content retrieval.Check if you run itEPSS 0.36%May 12, 2026
- Medium5.3Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS channel binding.Check if you run itEPSS 0.23%May 12, 2026
- Critical9.2Prior to 2025-11-03, well-intended users of Terraform or REST API for Google Cloud AlloyDB for PostgreSQL could have created clusters with an insecure default password…Check if you run itEPSS 0.41%May 12, 2026
- Medium5.3The Slek Gateway for WooCommerce plugin for WordPress is vulnerable to Information Exposure in version 1.0.Check if you run itEPSS 0.43%May 12, 2026