Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7Sparx Pro Cloud Server is vulnerable to a Race Condition in the /data_api/dl_internal_artifact.php endpoint.Check if you run itEPSS 0.72%May 19, 2026
- High8.7Sparx Enterprise Architect software has a security feature that limits user's actions to those specified in the role.Check if you run itEPSS 0.40%May 19, 2026
- Critical9.3Sparx Pro Cloud Server requires authentication based on requested URL.Check if you run itEPSS 0.94%May 19, 2026
- High8.7Sparx Pro Cloud Server is vulnerable to Broken Access Control within communication with the database.Check if you run itEPSS 0.60%May 19, 2026
- High7.8The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or PVH guest does a grant table version change fro…Check if you run itEPSS 0.12%May 19, 2026
- Medium6.5Any guest can cause xenstored to crash by issuing a XS_RESET_WATCHES command within a transaction due to an assert() triggering.Check if you run itEPSS 0.16%May 19, 2026
- Medium5.1A Stored HTML Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter.Check if you run itEPSS 0.19%May 19, 2026
- Medium4.8A Stored HTML Injection vulnerability was discovered in the Schedule Restore Archive functionality due to improper validation of an input parameter.Check if you run itEPSS 0.19%May 19, 2026
- Medium4.8A Stored HTML Injection vulnerability was discovered in the Users functionality due to improper validation of an input parameter.Check if you run itEPSS 0.19%May 19, 2026
- Medium4.8A Stored HTML Injection vulnerability was discovered in the Credentials Manager functionality due to improper validation of an input parameter.Check if you run itEPSS 0.19%May 19, 2026
- Medium5.1An Angular template injection vulnerability was discovered in the Reports functionality due to improper validation of an input parameter.Check if you run itEPSS 0.20%May 19, 2026
- Low1.8An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (Unix) allows a local attacker to load a rogue C…Check if you run itEPSS 0.09%May 19, 2026
- High7.5The Contest Gallery plugin for WordPress is vulnerable to SQL Injection via the 'form_input' parameter in versions up to, and including, 28.1.6.Check if you run itEPSS 0.39%May 19, 2026
- Critical9.8Piotnet piotnet_forms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.06%May 19, 2026
- Low1.6A possible information disclosure vulnerability exists in the Vaadin Maven plugin and Vaadin Gradle plugin that exposes the full set of environment variables in build…Check if you run itEPSS 0.12%May 19, 2026
- High7.1A flaw was found in Keycloak.Check if you run itEPSS 0.41%May 19, 2026
- High7.5A session fixation vulnerability was found in Keycloak's login-actions endpoints.Check if you run itEPSS 0.84%May 19, 2026
- High8.1A flaw was found in Keycloak's URL validation logic during redirect operations.Check if you run itEPSS 0.50%May 19, 2026
- High7.5A flaw was found in Keycloak.Check if you run itEPSS 0.88%May 19, 2026
- Medium6.8A flaw was found in Keycloak.Check if you run itEPSS 0.30%May 19, 2026
- Medium4.3Missing Authorization vulnerability in Brainstorm Force Presto Player allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.24%May 19, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Fix handling of MAY_BACKLOG requests MAY_BACKLOG requests can return EBUSY.Check if you run itEPSS 0.68%May 19, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() Yiming reports an integer underfl…Check if you run itEPSS 0.16%May 19, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the maximum server registration per node Current code does no bound checking o…Check if you run itEPSS 0.15%May 19, 2026
- Medium6.8A flaw was found in Keycloak.Check if you run itEPSS 0.44%May 19, 2026
Sort