Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3Unsafe use of Python's eval() on server-received data in the vector_in() function in amazon-redshift-python-driver before 2.1.14 allows a rogue server or man-in-the-mi…Check if you run itEPSS 0.81%May 18, 2026
- High7.8In mlflow/mlflow versions prior to 3.11.0, the function in creates temporary directories with world-writable permissions (0o777), and the function in creates directori…Check if you run itEPSS 0.19%May 18, 2026
- Critical9.9Dokploy is a free, self-hostable Platform as a Service (PaaS).Check if you run itEPSS 1.22%May 18, 2026
- High8.6FreePBX is an open source IP PBX.Check if you run itEPSS 0.90%May 18, 2026
- Critical9.8WebdriverIO is a test automation framework for unit, e2e and component testing using WebDriver, WebDriver BiDi and Appium.Check if you run itEPSS 3.31%May 18, 2026
- High7.3Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.Check if you run itEPSS 0.21%May 18, 2026
- High7.3Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attackers to execute arbitrary commands by manipulat…Check if you run itEPSS 0.51%May 18, 2026
- Medium4.8Claude HUD through 0.0.12, patched in commit 234d9aa, contains a path traversal vulnerability that allows attackers to read arbitrary files by supplying an unvalidated…Check if you run itEPSS 0.13%May 18, 2026
- Low2.4Claude HUD through 0.0.12, patched in commit 234d9aa, constructs OSC 8 terminal hyperlink escape sequences using raw cwd and branchUrl values without stripping control…Check if you run itEPSS 0.10%May 18, 2026
- Medium6.8Summarize prior to 0.15.1 contains an insecure file permission vulnerability in the refresh-free configuration rewrite path that allows local users to read sensitive c…Check if you run itEPSS 0.14%May 18, 2026
- Medium4.6Summarize prior to 0.15.1 contains a vulnerability in the hover summary feature that allows malicious pages to dispatch synthetic mouseover events over attacker-contro…Check if you run itEPSS 0.33%May 18, 2026
- Low2.1Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval whe…Check if you run itEPSS 0.23%May 18, 2026
- Medium4.6HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios.Check if you run itEPSS 0.12%May 18, 2026
- Medium6.1SimpleSAMLphp-casserver is a CAS 1.0 and 2.0 compliant CAS server in the form of a SimpleSAMLphp module.Check if you run itEPSS 0.27%May 18, 2026
- High8.9A vulnerability was found in lwIP up to 2.2.1.Check if you run itEPSS 1.10%May 18, 2026
- Medium5.3Summarize prior to 0.15.1 contains a missing authorization vulnerability in the content script window.postMessage bridge that allows malicious pages to perform unautho…Check if you run itEPSS 0.19%May 18, 2026
- High7.1Summarize prior to 0.15.1 contains a path traversal vulnerability in the /v1/summarize daemon endpoint that allows authenticated callers to write files to arbitrary di…Check if you run itEPSS 0.40%May 18, 2026
- Medium5.3DumbAssets through 1.0.11 contains a stored cross-site scripting vulnerability in asset fields including name, description, modelNumber, serialNumber, and tags that ar…Check if you run itEPSS 0.19%May 18, 2026
- Critical9.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCheck if you run itEPSS 0.99%May 18, 2026
- Medium6.1Microsoft Edge (Chromium-based) Spoofing VulnerabilityCheck if you run itEPSS 0.30%May 18, 2026
- Medium5.4Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.Check if you run itEPSS 0.30%May 18, 2026
- High8.8DumbAssets through 1.0.11 contains a path traversal vulnerability in the POST /api/delete-file endpoint and filesToDelete array parameters that allows unauthenticated…Check if you run itEPSS 0.63%May 18, 2026
- Critical10.0Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.49%May 18, 2026
- Medium5.7NetBSD prior to commit ec8451e contains a signed integer overflow vulnerability in the cryptodev_op() function in sys/opencrypto/cryptodev.c where the local variable i…Check if you run itEPSS 0.11%May 18, 2026
- Medium5.7NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodev_op() within the opencrypto subsystem that allows local attackers to trigger a doubl…Check if you run itEPSS 0.08%May 18, 2026
Sort