Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1libyang before 5.2.6 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-h…Check if you run itEPSS 0.67%May 26, 2026
- High8.5gix-submodule before 0.29.0 (gitoxide before 0.5.21, gix before 0.84.0) incorrectly validates the update field in .gitmodules, allowing attackers to bypass the Command…Check if you run itEPSS 0.65%May 26, 2026
- High8.7FreeRDP before 3.26.0 contains a heap-buffer-overflow vulnerability in gdi_CacheToSurface that allows remote attackers to write out-of-bounds heap memory.Check if you run itEPSS 1.36%May 26, 2026
- Medium5.5A vulnerability was found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 10.Check if you run itEPSS 0.26%May 26, 2026
- High8.9A vulnerability has been found in Totolink N300RH 6.1c.1353_B20190305.Check if you run itEPSS 2.13%May 26, 2026
- Low2.1A weakness has been identified in CodeAstro Leave Management System 1.0.Check if you run itEPSS 0.20%May 26, 2026
- Low1.9A security flaw has been discovered in Squirrel up to 3.2.Check if you run itEPSS 0.17%May 26, 2026
- Medium5.5A vulnerability was identified in vllm-project vllm 0.19.0.Check if you run itEPSS 0.43%May 26, 2026
- Medium6.9IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable for a NULL pointer dereferencing, if a specially crafted sequence of messages is sent for a certain…Check if you run itEPSS 0.17%May 26, 2026
- Medium5.7Zohocorp Zoho Mail wordpress plugin is vulnerable to Cross-Site request forgery (CSRF).Check if you run itEPSS 0.37%May 26, 2026
- Critical9.9A flaw was found in KubeVirt's virt-handler component.Check if you run itEPSS 0.74%May 26, 2026
- Medium4.4A heap-based buffer overflow vulnerability exists in XML parser functionality in the HiDraw.Check if you run itEPSS 0.10%May 26, 2026
- Medium4.1When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can modify stor…Check if you run itEPSS 3.73%May 26, 2026
- Medium5.3A Check Point HTTP-based service can incorrectly handle malformed HTTP requests.Check if you run itEPSS 2.61%May 26, 2026
- Medium5.6When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow.Check if you run itEPSS 3.96%May 26, 2026
- High7.5When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway.Check if you run itEPSS 4.49%May 26, 2026
- High8.1The Security Gateway does not correctly validate a length value in certain IKE packets when NAT-T is used (4500/UDP).Check if you run itEPSS 2.14%May 26, 2026
- High8.1The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP during the early stage of a connection attempt.Check if you run itEPSS 2.66%May 26, 2026
- High8.7An Allocation of Resources Without Limits or Throttling vulnerability in the OPC-UA Server used in PPT30 Operating System versions before 1.8.0 may be used by an unaut…Check if you run itEPSS 0.32%May 26, 2026
- Low3.8This vulnerability stems from a business logic flaw.Attackers can exploit legitimate application functions in unintended and abnormal ways, deviating from the designer…Check if you run itEPSS 0.13%May 26, 2026
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Magentech SW Core allows PHP Local File Inclusion.Check if you run itEPSS 0.42%May 26, 2026
- Medium5.3Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in SpabRice Nyla allows Code Injection.Check if you run itEPSS 0.26%May 26, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup allows Stored XSS.Check if you run itEPSS 0.17%May 26, 2026
- High7.8A heap-based buffer overflow vulnerability exists in the ID3v2 parsing functionality of MediaInfoLib (version(s): 26.01).Check if you run itEPSS 0.24%May 26, 2026
- High7.8A heap-based buffer overflow vulnerability exists in the LXF parsing functionality of MediaInfoLib (version(s): 26.01).Check if you run itEPSS 0.24%May 26, 2026
Sort