Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1HSC MailInspector 5.3.3-7 is vulnerable to Cross Site Scripting (XSS) in the /police/WarningUrlPage.php endpoint due to improper neutralization of user-supplied input…Check if you run itEPSS 0.19%May 18, 2026
- Medium6.1HSC MailInspector v5.3.3-7 contains a Cross-Site Scripting (XSS) vulnerability in the /tap/tap.php endpoint due to improper neutralization of user-controlled input usi…Check if you run itEPSS 0.24%May 18, 2026
- High7.5HSC MailInspector 5.3.3-7 has a Path Traversal vulnerability due to improper validation of user-supplied input in the /tap/dw.php endpoint.Check if you run itEPSS 2.66%May 18, 2026
- High7.5HSC MailInspector v5.3.3-7 contains a Local File Inclusion (LFI) vulnerability caused by improper control of user-supplied file paths.Check if you run itEPSS 1.53%May 18, 2026
- Critical9.1Incorrect access control in the /uci/get/ endpoint of NOVUS AirGate 4G firmware v1.1.16 allows unauthenticated attackers to obtain administrator credentials via a craf…Check if you run itEPSS 0.24%May 18, 2026
- High7.1Creating a "2dsphere_bucket" index on a non-timeseries bucket collection will succeed, but any subsequent attempt to insert a document which triggers updating that ind…Check if you run itEPSS 0.24%May 18, 2026
- Critical10.0A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on…Check this weekEPSS 15.15%May 18, 2026
- High8.8Thermo Fisher Scientific Torrent Suite Dx through 5.14.2 has a privilege escalation vulnerability that may allow an authenticated user with limited access privileges t…Check if you run itEPSS 0.26%May 18, 2026
- Medium6.2OpENer v2.3-558-g1e99582 contains an out-of-bounds read vulnerability in the Common Packet Format (CPF) parser, specifically in CreateCommonPacketFormatStructure() in…Check if you run itEPSS 0.11%May 18, 2026
- Medium5.3An issue in Intelbras VIP-1230-D-G4 Version V2.800.00IB00C.0.T allows a remote attacker to obtain sensitive information via password reset functionality under /OutsideCmdCheck if you run itEPSS 0.35%May 18, 2026
- Medium6.5An attacker in a privileged network position may be able to leak sensitive information.Check if you run itEPSS 0.27%May 18, 2026
- High8.8ngrok v4.3.3 and 5.0.0-beta.2 is vulnerable to Command Injection.Check if you run itEPSS 0.98%May 18, 2026
- High7.5In tinyMQTT commit 6226ade15bd4f97be2d196352e64dd10937c1962 (2024-02-18), the broker mishandles protocol violations during CONNECT packet parsing.Check if you run itEPSS 0.28%May 18, 2026
- High8.2Dify before version 1.14.2 contains an authorization bypass vulnerability in the file preview endpoint that allows any authenticated user to read up to 3,000 character…Check if you run itEPSS 0.43%May 18, 2026
- Critical9.3dify dify Relative Path TraversalPatch nowKEVEPSS 22.71%May 18, 2026
- Critical9.3Dify before version 1.14.2 contains an authorization bypass vulnerability that allows authenticated editor users to set and enable trace configurations for any applica…Check if you run itEPSS 5.97%May 18, 2026
- High7.5An issue in prestashop upsshipping all versions through at least 2.4.0 allows a remote attacker to obtain sensitive information via the /modules/upsshipping/logs/, and…Check if you run itEPSS 0.31%May 18, 2026
- High7.3Offline Hospital Management System 5.3.0 allows remote code execution due to an improper Electron renderer configuration.Check if you run itEPSS 0.32%May 18, 2026
- High7.5Gnutls: gnutls: denial of service via dtls packet reordering vulnerabilityCheck if you run itEPSS 1.33%May 18, 2026
- Medium6.3A flaw has been found in opensourcepos Open Source Point of Sale up to 3.4.2.Check if you run itEPSS 0.18%May 18, 2026
- Critical9.8SGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python obje…Check if you run itEPSS 0.58%May 18, 2026
- Critical9.1SGLangs multimodal generation runtime is vulnerable to an unauthenticated path traversal vulnerability, allowing an attacker to write arbitrary files anywhere the serv…Check if you run itEPSS 0.39%May 18, 2026
- Critical9.8SGLangs multimodal generation runtime scheduler's ROUTER socket binds to 0.0.0.0 by default and contains a sink that calls pickle.loads() on incoming messages, enablin…Check if you run itEPSS 0.40%May 18, 2026
- High7.1Denial-of-service condition in M-Files Server versions before 26.5.16015.0, before 26.2 LTS, and before 25.8 LTS SR3 allows an authenticated user to cause the MFserver…Check if you run itEPSS 0.23%May 18, 2026
- Medium5.3A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2.Check if you run itEPSS 0.39%May 18, 2026
Sort