Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.6In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints.Check if you run itEPSS 0.38%May 19, 2026
- High7.3Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz via Content component operations.Check if you run itEPSS 0.47%May 19, 2026
- Medium6.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.Check if you run itEPSS 0.68%May 19, 2026
- Medium6.5Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz.Check if you run itEPSS 0.54%May 19, 2026
- Medium6.3There is an unauthorized access vulnerability in ZTE MU5250.Check if you run itEPSS 0.25%May 19, 2026
- Medium5.4A flaw was found in Keycloak.Check if you run itEPSS 0.28%May 19, 2026
- Critical9.8Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.95%May 19, 2026
- High7.5Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Excessive Allocation.Check if you run itEPSS 0.27%May 19, 2026
- High7.5Improper Check or Handling of Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Manipulation.Check if you run itEPSS 0.27%May 19, 2026
- High7.5Improper Check for Unusual or Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Manipulation.Check if you run itEPSS 0.27%May 19, 2026
- Critical9.8Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.Check if you run itEPSS 0.29%May 19, 2026
- High7.5Memory allocation with excessive size value vulnerability in Samsung Open Source Escargot allows Excessive Allocation.Check if you run itEPSS 0.27%May 19, 2026
- High7.5Release of invalid pointer or reference vulnerability in Samsung Open Source Escargot allows Buffer Manipulation.Check if you run itEPSS 0.27%May 19, 2026
- Medium4.3A flaw was found in Keycloak.Check if you run itEPSS 0.39%May 19, 2026
- Medium5.5Versions of the package exifreader before 4.39.0 are vulnerable to Improper Handling of Highly Compressed Data (Data Amplification) due to decompressing PNG zTXt metad…Check if you run itEPSS 0.46%May 19, 2026
- High7.7This affects versions of the package exifreader before 4.39.0.Check if you run itEPSS 0.52%May 19, 2026
- Critical9.8Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.Check if you run itEPSS 0.29%May 19, 2026
- Critical9.8Use after free vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.Check if you run itEPSS 0.29%May 19, 2026
- High7.5Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Oversized Serialized Data Payloads.Check if you run itEPSS 0.27%May 19, 2026
- High7.5The Fortis for WooCommerce WordPress plugin before 1.3.1 may leak sensitive API keys to unauthenticated attackers, allowing them to query Fortis' API and retrieve sens…Check if you run itEPSS 0.40%May 19, 2026
- High7.5NULL pointer dereference vulnerability in Samsung Open Source Walrus allows Pointer Manipulation.Check if you run itEPSS 0.21%May 19, 2026
- Medium5.3The /api/v1/autotranslate.translateMessage endpoint in versions <8.5.0, <8.4.2, <8.3.4, <8.2.4, <8.1.5, <8.0.6, <7.13.8, and <7.10.12 allows any authenticated user to…Check if you run itEPSS 0.25%May 19, 2026
- High7.5NULL pointer dereference vulnerability in Samsung Open Source Walrus allows an attacker to cause a denial of service via a crafted WebAssembly module containing deeply…Check if you run itEPSS 0.19%May 19, 2026
- Low3.3in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.Check if you run itEPSS 0.09%May 19, 2026
- Low3.3in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.Check if you run itEPSS 0.12%May 19, 2026
Sort