Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Buffer Overflow vulnerability in EPSON L14150 FL27PB allows a remote attacker to execute arbitrary code via the RAW Printing Service (JetDirect) on TCP port 9100Check if you run itEPSS 0.65%May 20, 2026
- High7.5Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability.Check if you run itEPSS 0.35%May 20, 2026
- Medium4.1Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that allows attackers to cause incorrect Bitcoin addresses to be displayed by e…Check if you run itEPSS 0.14%May 20, 2026
- High7.5Uncontrolled Memory Allocation vulnerability in Progress Software MOVEit Automation allows Excessive Allocation.Check if you run itEPSS 0.35%May 20, 2026
- High8.2Allocation of Resources Without Limits or Throttling vulnerability in phenixdigital phoenix_storybook allows unauthenticated denial-of-service via BEAM atom table exhaustion.Check if you run itEPSS 0.54%May 20, 2026
- Critical9.5Code Injection vulnerability in phenixdigital phoenix_storybook allows unauthenticated remote code execution via unsanitized attribute value interpolation in HEEx temp…Check if you run itEPSS 2.11%May 20, 2026
- Low2.3Authorization Bypass Through User-Controlled Key vulnerability in phenixdigital phoenix_storybook allows cross-session PubSub topic injection via a URL query parameter.Check if you run itEPSS 0.45%May 20, 2026
- High8.7Twig versions 2.16.x and 3.9.0 through 3.25.x contain a sandbox bypass vulnerability when using a SourcePolicyInterface that allows attackers with template rendering c…Check if you run itEPSS 0.76%May 20, 2026
- High7.8A heap-based buffer overflow vulnerability exists in the Channel Splitting functionality of MediaInfoLib (version(s): 26.01).Check if you run itEPSS 0.25%May 20, 2026
- Medium6.5The HCL DominoIQ RAG feature is affected by a Broken Access Control vulnerability.Check if you run itEPSS 0.26%May 20, 2026
- Critical9.8Drupal Core SQL Injection VulnerabilityPatch nowKEVEPSS 89.38%May 20, 2026
- Medium5.3An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling a remote unauthenticated attacker to cause seve…Check if you run itEPSS 0.66%May 20, 2026
- Medium5.9Undefined behavior may result due to a race condition leading to a use-after-free violation.Check if you run itEPSS 1.39%May 20, 2026
- High7.5Multiple flaws have been identified in related to the handling of DNS messages whose CLASS is not Internet ( ) — for example, or , or DNS messages that specify meta-cl…Check if you run itEPSS 1.94%May 20, 2026
- High8.1Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.85%May 20, 2026
- Medium5.0Missing Authorization vulnerability in ADD-ONS.ORG PDF for Elementor Forms + Drag And Drop Template Builder allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.19%May 20, 2026
- High7.8Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.41%May 20, 2026
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITH YITH WooCommerce Product Add-Ons allows Blind SQL Injection.Check if you run itEPSS 0.29%May 20, 2026
- Critical9.8A use-after-free vulnerability exists within the DNS-over-HTTPS implementation.Check if you run itEPSS 1.54%May 20, 2026
- Medium5.3BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack.Check if you run itEPSS 0.41%May 20, 2026
- High7.5BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing malic…Check if you run itEPSS 1.09%May 20, 2026
- High7.3Rsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in daemon file handling that allows attackers to redirect file writes outsid…Check if you run itEPSS 0.15%May 20, 2026
- Medium4.3Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.21%May 20, 2026
- Medium6.5Missing Authorization vulnerability in Magepeople inc.Check if you run itEPSS 0.31%May 20, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Visualizer allows Stored XSS.Check if you run itEPSS 0.17%May 20, 2026
Sort