Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4A session management vulnerability in AOS-8 allows previously authenticated users to retain network access after their accounts are administratively disabled.Check if you run itEPSS 0.23%May 12, 2026
- High7.2SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol.Check if you run itEPSS 0.58%May 12, 2026
- High7.2SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol.Check if you run itEPSS 0.58%May 12, 2026
- High7.2SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol.Check if you run itEPSS 0.58%May 12, 2026
- High7.2SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol.Check if you run itEPSS 0.58%May 12, 2026
- High7.2SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol.Check if you run itEPSS 0.58%May 12, 2026
- High7.2Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-…Check if you run itEPSS 0.62%May 12, 2026
- High7.2Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-…Check if you run itEPSS 0.62%May 12, 2026
- High7.2Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-…Check if you run itEPSS 0.62%May 12, 2026
- High7.2Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-…Check if you run itEPSS 0.62%May 12, 2026
- High7.2Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-…Check if you run itEPSS 0.62%May 12, 2026
- High8.7Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Improper Limitation of a Pathname to a Restrict…Check if you run itEPSS 1.01%May 12, 2026
- Critical9.4An administrative user with access to configure webhooks can execute arbitrary commands by configuring and then triggering webhooks containing specific FreeMarker template syntax.Check if you run itEPSS 0.70%May 12, 2026
- High8.0Cleanuparr is a tool for automating the cleanup of unwanted or blocked files in Sonarr, Radarr, and supported download clients like qBittorrent.Check if you run itEPSS 0.19%May 12, 2026
- Critical9.8Cleanuparr is a tool for automating the cleanup of unwanted or blocked files in Sonarr, Radarr, and supported download clients like qBittorrent.Check if you run itEPSS 0.33%May 12, 2026
- Medium4.3Kubewarden is a policy engine for Kubernetes.Check if you run itEPSS 0.27%May 12, 2026
- Medium6.1Fides is an open-source privacy engineering platform.Check if you run itEPSS 0.55%May 12, 2026
- Critical9.3DevGuard provides vulnerability management for the full software supply chain.Check if you run itEPSS 0.43%May 12, 2026
- High8.8Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.78%May 12, 2026
- High8.3Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.63%May 12, 2026
- Critical9.8The mamba language model framework thru 2.2.6 is vulnerable to insecure deserialization (CWE-502) when loading pre-trained models from HuggingFace Hub.Check if you run itEPSS 0.60%May 12, 2026
- Medium6.5An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.0.0 through 6.0.2, FortiDeceptor 5.3.0…Check if you run itEPSS 0.33%May 12, 2026
- High7.2OS command injection in Ivanti Virtual Traffic Manager before version 22.9r4 allows a remote authenticated attacker with admin privileges to achieve remote code execution.Check if you run itEPSS 2.98%May 12, 2026
- High8.1YetAnotherForum.NET (YAF.NET) is a C# ASP.NET forum.Check if you run itEPSS 0.38%May 12, 2026
- High8.8YetAnotherForum.NET (YAF.NET) is a C# ASP.NET forum.Check if you run itEPSS 0.64%May 12, 2026