Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8An OS command injection vulnerability in the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 allows remote attackers to execute arbitrary commands via…Check if you run itEPSS 1.62%May 19, 2026
- Critical9.8The JSONSerializer and CBORSerializer in APScheduler (all versions including 3.10.x and 4.0.0a5) are vulnerable to Remote Code Execution (RCE) via Insecure Deserialization.Check if you run itEPSS 0.81%May 19, 2026
- Critical9.1API endpoints in LalanaChami Pharmacy Management System (commit 5c3d028) lack authentication middleware.Check if you run itEPSS 0.55%May 19, 2026
- Critical9.8The LalanaChami Pharmacy Management System (commit 5c3d028) allows unauthenticated remote attackers to escalate privileges by self-assigning an administrative role dur…Check if you run itEPSS 0.48%May 19, 2026
- High8.8BillaBear (all versions prior to Jan 2026) contains a SQL Injection vulnerability in the EventRepository.Check if you run itEPSS 0.36%May 19, 2026
- Critical9.8scalar/astro v0.1.13 was discovered to contain a Server-Side Request Forgery (SSRF) in the scalar_url query parameter of the Scalar Proxy endpoint.Check if you run itEPSS 0.47%May 19, 2026
- Critical9.8scalar/astro v0.1.13 was discovered to contain an arbitrary file upload vulnerability in the the scalar_url query parameter of the Scalar Proxy endpoint.Check if you run itEPSS 0.53%May 19, 2026
- Critical9.2NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-controlled NGINX variable (for example, $http_*, $arg_*,…Check if you run itEPSS 9.69%May 19, 2026
- Medium6.9Technitium DNS Server aggressively tries to fetch missing RRSIG records or mismatched DNSKEY records.Check if you run itEPSS 0.39%May 19, 2026
- Critical9.3Tyler Identity Local (TID-L) uses documented, default administrative credentials.Check if you run itEPSS 0.48%May 19, 2026
- High8.7HestiaCP versions 1.2.0 through 1.9.4 contain an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass authentication security controls by s…Check if you run itEPSS 0.24%May 19, 2026
- Medium5.3An issue was discovered in the Portrait Dell Color Management application before 3.7.0 for Dell monitors.Check if you run itEPSS 0.14%May 19, 2026
- Critical9.6A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used by the Glassfish gadget handler.Check if you run itEPSS 0.65%May 19, 2026
- Critical9.1An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console.Check if you run itEPSS 0.84%May 19, 2026
- High7.3An issue in gohttp commit 34ea51 allows attackers to execute a directory traversal via supplying a crafted request.Check if you run itEPSS 0.52%May 19, 2026
- High7.3An issue was discovered in ModelScope 1.25.0 allowing attackers to execute arbitrary code via crafted module listed in the configuration file (dey_mini.yaml) under the…Check if you run itEPSS 0.52%May 19, 2026
- High8.8Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 and Firefox 150.Check if you run itEPSS 0.47%May 19, 2026
- High8.8Memory safety bugs present in Firefox ESR 140.10 and Firefox 150.Check if you run itEPSS 0.36%May 19, 2026
- High8.8Memory safety bugs present in Firefox 150.Check if you run itEPSS 0.37%May 19, 2026
- High8.8Privilege escalation in the WebRTC: Audio/Video component.Check if you run itEPSS 0.33%May 19, 2026
- Medium6.5Same-origin policy bypass in the Networking: JAR component.Check if you run itEPSS 0.21%May 19, 2026
- High8.8Privilege escalation in the Security component.Check if you run itEPSS 0.31%May 19, 2026
- High8.1Mitigation bypass in the DOM: Security component.Check if you run itEPSS 0.29%May 19, 2026
- High7.5Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component.Check if you run itEPSS 0.41%May 19, 2026
- High7.5Information disclosure in the Graphics: WebGPU component.Check if you run itEPSS 0.33%May 19, 2026
Sort