Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Dell ECS, versions 3.5 and 3.6, contain an Improper Access Control in the Identity and Access Management (IAM) module.Check if you run itEPSS 0.35%May 22, 2026
- Critical9.2NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.Check this weekEPSS 10.86%May 22, 2026
- High8.8An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6 allows a remote unauthenticated attacker to execute arbitrary code.Check if you run itEPSS 0.56%May 22, 2026
- Low2.1Concrete CMS version 9.0 to 9.5.0 is vulnerable to Stored XSS via page name in the Atomik theme.Check if you run itEPSS 0.15%May 22, 2026
- Low2.3Concrete CMS 9.5.0 and below is vulnerable to IDOR + wrong-authorization-level in the Express association Reorder dialog.Check if you run itEPSS 0.24%May 22, 2026
- Low2.3Concrete CMS 9.5.0 and below is vulnerable to CSRF via Backend\File::approveVersion.Check if you run itEPSS 0.10%May 22, 2026
- Medium5.5Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the ssh.Check if you run itEPSS 0.07%May 22, 2026
- High7.5Directory traversal in Follett Software's Destiny Library Manager 22_0_2_rc1 and fixed in v.22.5 AU1 allows remote attackers to read arbitrary system and application f…Check if you run itEPSS 0.71%May 22, 2026
- Medium5.5Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability.Check if you run itEPSS 0.10%May 22, 2026
- Medium6.7Dell VxRail versions before 7.0.200 contain a Plain-text Password Storage Vulnerability in VxRail Manager.Check if you run itEPSS 0.12%May 22, 2026
- Critical9.2shell-quote's function did not validate object-token inputs against the operator model used by .Check if you run itEPSS 0.79%May 22, 2026
- Medium4.8vifm is vulnerable to a heap buffer overflow during the history merge process when saving the state file (vifminfo.json).Check if you run itEPSS 0.14%May 22, 2026
- Critical9.1Unprotected transport of credentials vulnerability in syslink software AG Avantra on Linux, Windows allows Sniffing Attacks.Check if you run itEPSS 0.19%May 22, 2026
- Medium5.1Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords.Check if you run itEPSS 0.10%May 22, 2026
- High7.5Insertion of sensitive information into log file vulnerability in syslink software AG Avantra on Linux, Windows allows Resource Leak Exposure.Check if you run itEPSS 0.22%May 22, 2026
- Critical9.6Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs (aka Session Replay).Check if you run itEPSS 0.22%May 22, 2026
- High7.5Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability.Check if you run itEPSS 0.13%May 22, 2026
- High7.8Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Incorrect Privilege Assignment vulnerability.Check if you run itEPSS 0.09%May 22, 2026
- Medium5.5Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability.Check if you run itEPSS 0.10%May 22, 2026
- Medium6.5Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Improper Certificate Validation vulnerability.Check if you run itEPSS 0.08%May 22, 2026
- High8.2Dell PowerFlex Manager, versions 4.6.2 and prior, contains an Open Redirect Vulnerability.Check if you run itEPSS 0.17%May 22, 2026
- Critical9.8An LDAP injection vulnerability in the LDAP Certificate repository of the XKMS server in Apache CXF may allow an attacker to retrieve arbitrary certificates from the repository.Check if you run itEPSS 0.72%May 22, 2026
- Medium5.3Insecure XML parser configuration in Apache CXF's WS-Transfer module may allow attackers to perform XXE attacks.Check if you run itEPSS 0.31%May 22, 2026
- High7.5The fix for CVE-2025-48913: Apache CXF: Untrusted JMS configuration can lead to RCE was not complete, meaning that another path in the code might lead to code executio…Check if you run itEPSS 0.66%May 22, 2026
- Medium6.5Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.2, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate the TIFF IFD offset in the image heade…Check if you run itEPSS 0.24%May 22, 2026
Sort