Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.6TypeBot is a chatbot builder tool.Check if you run itEPSS 0.24%May 22, 2026
- Critical10.0Typebot is a chatbot builder tool.Check if you run itEPSS 0.35%May 22, 2026
- Critical9.8Sunshine is a self-hosted game stream host for Moonlight.Check if you run itEPSS 0.29%May 22, 2026
- Medium5.4Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate the OAuth token scope on the callback which allows an au…Check if you run itEPSS 0.14%May 22, 2026
- High8.7Typebot is a chatbot builder tool.Check if you run itEPSS 0.26%May 22, 2026
- Medium6.5Typebot is a chatbot builder tool.Check if you run itEPSS 0.32%May 22, 2026
- High8.8Microsoft SharePoint Server Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 80.24%May 22, 2026
- Medium5.4Missing authorization in the entry status management feature in Devolutions Server allows a non-administrator authenticated user to bypass the administrator-enforced P…Check if you run itEPSS 0.19%May 22, 2026
- Low3.1Unverified password change in Devolutions Server allows an attacker to change a user's password without providing the previous one via a crafted password change request.Check if you run itEPSS 0.19%May 22, 2026
- Low2.6Authorization bypass in the entry duplication feature in Devolutions Server allows an authenticated user with write access to any vault to copy documentation and attac…Check if you run itEPSS 0.19%May 22, 2026
- Low2.4Insufficient logging in the entry export feature in Devolutions Server allows an authenticated user with export permissions to export a sealed entry without triggering…Check if you run itEPSS 0.22%May 22, 2026
- Medium4.3Improper access control in the entry documentation and attachment features in Devolutions Server allows an authenticated user with vault read access to retrieve the do…Check if you run itEPSS 0.21%May 22, 2026
- Medium5.0Improper input validation in the external authentication provider flow in Devolutions Server allows an unauthenticated remote attacker to redirect victims to an attack…Check if you run itEPSS 0.23%May 22, 2026
- Medium4.3Missing authorization in the user profile update feature in Devolutions Server allows an authenticated Active Directory user to modify their own profile attributes via…Check if you run itEPSS 0.21%May 22, 2026
- Medium4.3Missing authorization in the vault import feature in Devolutions Server 2026.1.16.0 and earlier allows a low-privileged authenticated user to create new vaults via a c…Check if you run itEPSS 0.21%May 22, 2026
- High7.6Improper handling of factor key state in the multi-factor authentication management feature in Devolutions Server allows an attacker with knowledge of a user's passwor…Check if you run itEPSS 0.32%May 22, 2026
- Low2.7Improper enforcement of the sealed-entry workflow in the entry sensitive-data retrieval feature in Devolutions Server allows an authenticated user with access to a sea…Check if you run itEPSS 0.25%May 22, 2026
- High7.1Improper authorization in the Active Directory browsing feature in Devolutions Server allows a low-privileged authenticated user to obtain authentication material asso…Check if you run itEPSS 0.25%May 22, 2026
- Medium4.3Improper access control in the entry activity log feature in Devolutions Server allows an authenticated user with access to an entry but without the required permissio…Check if you run itEPSS 0.23%May 22, 2026
- Medium6.1Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.Check if you run itEPSS 0.24%May 22, 2026
- Medium6.1Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.Check if you run itEPSS 0.22%May 22, 2026
- Medium6.1Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.Check if you run itEPSS 0.22%May 22, 2026
- Medium6.1Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.Check if you run itEPSS 0.22%May 22, 2026
- Medium6.5Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service.Check if you run itEPSS 0.33%May 22, 2026
- High7.5Dell Unisphere for PowerMax vApp version prior to 10.0.0.2, contains an authorization bypass vulnerability in the Unisphere for VMAX application running in vAppCheck if you run itEPSS 0.25%May 22, 2026
Sort