Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.50%May 22, 2026
- Medium5.3Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts.Check if you run itEPSS 0.40%May 22, 2026
- Medium5.3Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts.Check if you run itEPSS 0.34%May 22, 2026
- High7.5Deserialization of untrusted data in Microsoft Planetary Computer Pro allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.92%May 22, 2026
- Critical9.3Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform tampering over a network.Check if you run itEPSS 0.42%May 22, 2026
- Critical9.8Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.53%May 22, 2026
- High8.8Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.53%May 22, 2026
- High8.8Authorization bypass through user-controlled key in Azure Privileged Identity Management (PIM) allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.43%May 22, 2026
- Critical9.8Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.47%May 22, 2026
- High7.7Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.58%May 22, 2026
- High7.5Improper privilege management in Azure Entra ID allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.55%May 22, 2026
- Critical9.8Improper neutralization of special elements used in a command ('command injection') in Microsoft Power Pages allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.58%May 22, 2026
- High8.7NukeViet CMS is a multi Content Management System.Check if you run itEPSS 0.42%May 22, 2026
- High8.1RT is an open source, enterprise-grade issue and ticket tracking system.Check if you run itEPSS 0.39%May 22, 2026
- High8.8RT is an open source, enterprise-grade issue and ticket tracking system.Check if you run itEPSS 0.34%May 22, 2026
- High7.1RT is an open source, enterprise-grade issue and ticket tracking system.Check if you run itEPSS 0.12%May 22, 2026
- Medium4.6RT is an open source, enterprise-grade issue and ticket tracking system.Check if you run itEPSS 0.17%May 22, 2026
- Medium5.1libheif is a HEIF and AVIF file format decoder and encoder.Check if you run itEPSS 0.30%May 22, 2026
- Medium6.5libheif is a HEIF and AVIF file format decoder and encoder.Check if you run itEPSS 0.25%May 22, 2026
- Medium4.3JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks.Check if you run itEPSS 0.15%May 22, 2026
- High8.7An authentication logic vulnerability in multiple TP-Link range extenders allows an unauthenticated attacker on an adjacent network to manipulate a login parameter and…Check if you run itEPSS 0.40%May 22, 2026
- High8.8The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Python files from model directo…Check if you run itEPSS 0.22%May 22, 2026
- High8.8The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, and runs without sandboxing.Check if you run itEPSS 0.22%May 22, 2026
- Medium5.5BentoML is a Python library for building online serving systems optimized for AI apps and model inference.Check if you run itEPSS 0.28%May 22, 2026
- High7.5Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.42%May 22, 2026
Sort