Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending pr…Check if you run itEPSS 0.40%Apr 28, 2026
- Medium6.5NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Validation by path traversing.Check if you run itEPSS 0.36%Apr 28, 2026
- High8.8NVIDIA FLARE SDK contains a vulnerability in FOBS, where an attacker may cause deserialization of untrusted data by sending a malicious FOBS- encoded message.Check if you run itEPSS 0.48%Apr 28, 2026
- Critical9.8NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cause authorization bypass thr…Check if you run itEPSS 0.57%Apr 28, 2026
- Critical9.8** UNSUPPORTED WHEN ASSIGNED ** Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Pony Mail leading to admin account takeover.Check if you run itEPSS 0.44%Apr 28, 2026
- Medium5.4Cross-Site Scripting (XSS) vulnerability exists in FUEL CMS v1.5.2 and before within the asset upload functionality.Check if you run itEPSS 0.17%Apr 28, 2026
- High8.2Authentication Bypass vulnerability exists in Netmaker versions prior to 1.5.0.Check if you run itEPSS 0.30%Apr 28, 2026
- Critical9.8Insecure deserialization of untrusted input in StellarGroup HPX 1.11.0 under certain conditions may allow attackers to execute arbitrary code or other unspecified impacts.Check if you run itEPSS 0.48%Apr 28, 2026
- Medium5.3An issue was discovered in Cista v0.15 and below.Check if you run itEPSS 0.23%Apr 28, 2026
- Low2.0A vulnerability was identified in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.21%Apr 28, 2026
- Medium5.3The raw message of every server-side AuthenticationException is returned to the unauthenticated remote caller in the gRPC status description.Check if you run itEPSS 0.20%Apr 28, 2026
- High8.8When an authenticated user is denied access to a gRPC method, their authenticated identity remains bound to the gRPC worker thread and can be inherited by a subsequent…Check if you run itEPSS 0.17%Apr 28, 2026
- Critical9.2opencats opencats Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 32.98%Apr 28, 2026
- High7.5The Aranda File Server (AFS) component in Aranda Software Aranda Service Desk before 8.3.12 stores daily activity logs with predictable names in a publicly accessible…Check if you run itEPSS 0.63%Apr 28, 2026
- Medium6.7An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix Prism Central.Check if you run itEPSS 0.53%Apr 28, 2026
- Medium4.7Multiple BinSoft products are vulnerable to Remote Command Execution.Check if you run itEPSS 0.29%Apr 28, 2026
- Medium4.3A flaw was found in the OpenShift Container Platform build system.Check if you run itEPSS 0.18%Apr 28, 2026
- Medium5.5A vulnerability was detected in DV0x creative-ad-agent up to 751b9e5146604dc65049bd0f62dcbdad6212f8a3.Check if you run itEPSS 0.48%Apr 28, 2026
- High8.5An authorization vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/moUser/update' endpoint, could allow an authenticated user with user modificati…Check if you run itEPSS 0.23%Apr 28, 2026
- High8.5An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in the endpoint '/minerva/moUser/show/'.Check if you run itEPSS 0.20%Apr 28, 2026
- Critical9.4An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/user/updateUserProfile' endpoint.Check if you run itEPSS 0.25%Apr 28, 2026
- High7.3The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can re…Check if you run itEPSS 0.24%Apr 28, 2026
- Low2.1A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.25%Apr 28, 2026
- High8.9A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 2.45%Apr 28, 2026
- Medium6.5In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when handled by .Check if you run itEPSS 0.24%Apr 28, 2026
Sort