Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.6When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow.Check if you run itEPSS 3.96%May 26, 2026
- High7.5When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway.Check if you run itEPSS 4.49%May 26, 2026
- High8.1The Security Gateway does not correctly validate a length value in certain IKE packets when NAT-T is used (4500/UDP).Check if you run itEPSS 2.14%May 26, 2026
- High8.1The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP during the early stage of a connection attempt.Check if you run itEPSS 2.66%May 26, 2026
- High8.7An Allocation of Resources Without Limits or Throttling vulnerability in the OPC-UA Server used in PPT30 Operating System versions before 1.8.0 may be used by an unaut…Check if you run itEPSS 0.32%May 26, 2026
- Low3.8This vulnerability stems from a business logic flaw.Attackers can exploit legitimate application functions in unintended and abnormal ways, deviating from the designer…Check if you run itEPSS 0.13%May 26, 2026
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Magentech SW Core allows PHP Local File Inclusion.Check if you run itEPSS 0.42%May 26, 2026
- Medium5.3Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in SpabRice Nyla allows Code Injection.Check if you run itEPSS 0.26%May 26, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup allows Stored XSS.Check if you run itEPSS 0.17%May 26, 2026
- High7.8A heap-based buffer overflow vulnerability exists in the ID3v2 parsing functionality of MediaInfoLib (version(s): 26.01).Check if you run itEPSS 0.24%May 26, 2026
- High7.8A heap-based buffer overflow vulnerability exists in the LXF parsing functionality of MediaInfoLib (version(s): 26.01).Check if you run itEPSS 0.24%May 26, 2026
- Medium4.3Missing Authorization vulnerability in Webful Creations RepairBuddy allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.22%May 26, 2026
- Medium5.3Missing Authorization vulnerability in VideoWhisper.Com Paid Videochat Turnkey Site allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.25%May 26, 2026
- Critical9.3Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 26.16%May 26, 2026
- High8.7The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write.Check if you run itEPSS 0.45%May 26, 2026
- High7.2The affected products insufficiently verify authorization when deleting user accounts.Check if you run itEPSS 0.35%May 26, 2026
- High8.5The affected product extracts installation files to a temporary directory with incorrect default permissions during administrative installation.Check if you run itEPSS 0.10%May 26, 2026
- High8.5The affected product creates a directory with insecure default permissions during administrative installation.Check if you run itEPSS 0.12%May 26, 2026
- Medium5.3Missing Authorization vulnerability in TeconceTheme Mayosis Core allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.23%May 26, 2026
- Low2.1A flaw has been found in Totolink CA750-PoE 6.2c.510.Check this weekEPSS 10.38%May 26, 2026
- Low2.1A vulnerability was detected in Totolink CA750-PoE 6.2c.510.Check this weekEPSS 10.38%May 26, 2026
- Low2.1A security vulnerability has been detected in Totolink CA750-PoE 6.2c.510.Check this weekEPSS 10.38%May 26, 2026
- High7.7Versions of the package pacote from 11.2.7 and before 21.5.1 are vulnerable to Denial of Service (DoS) via the addGitSha function.Check if you run itEPSS 0.35%May 26, 2026
- Medium5.5Versions of the package @koa/router from 14.0.0 and before 15.0.0 are vulnerable to Access Control Bypass due to the middleware being silently dropped from the executi…Check if you run itEPSS 0.36%May 26, 2026
- Medium4.6Missing password field masking vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view, Hitachi Ops Center Analyzer probe modules), Hitac…Check if you run itEPSS 0.18%May 26, 2026
Sort