Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Kuma is a modern Envoy-based service mesh that can run on every cloud across both Kubernetes and VMs.Check if you run itEPSS 0.30%May 28, 2026
- High8.5Nautobot is a Network Source of Truth and Network Automation Platform.Check if you run itEPSS 0.40%May 28, 2026
- Critical9.1In Casdoor versions 2.362.0 and earlier, the SAML callback handler in controllers/auth.go accepts any well-formed SAMLResponse sent to /api/acs without verifying that…Check if you run itEPSS 0.21%May 28, 2026
- Medium5.3Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.33%May 28, 2026
- Medium6.5Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.20%May 28, 2026
- Medium5.3opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API.Check if you run itEPSS 0.85%May 28, 2026
- Critical9.3GitButler is a modern Git-based version control interface for AI-powered workflows.Check if you run itEPSS 0.49%May 28, 2026
- Medium6.8Synapse is an open source Matrix homeserver implementation.Check if you run itEPSS 0.13%May 28, 2026
- Low3.7PyJWT is a JSON Web Token implementation in Python.Check if you run itEPSS 0.32%May 28, 2026
- Medium4.2PyJWT is a JSON Web Token implementation in Python.Check if you run itEPSS 0.22%May 28, 2026
- High8.7esm.sh is a no-build content delivery network (CDN) for web development.Check if you run itEPSS 0.50%May 28, 2026
- High8.2Espressif Shared GitHub DangerJS is a reusable GitHub Action CI DangerJS workflow for Espressif GitHub projects.Check if you run itEPSS 0.32%May 28, 2026
- High8.8phpMyFAQ before 4.1.3 contains an unauthenticated password reset vulnerability in the user password update API endpoint that allows attackers to change account passwor…Check if you run itEPSS 0.33%May 28, 2026
- High8.7phpMyFAQ before 4.1.3 contains an authentication bypass vulnerability in API v4.0 where the default empty api.apiClientToken allows unauthenticated users to create and…Check if you run itEPSS 0.56%May 28, 2026
- High8.7phpMyFAQ before 4.1.3 contains an insecure direct object reference vulnerability in the admin API user password endpoint that allows authenticated administrators to ch…Check if you run itEPSS 0.44%May 28, 2026
- Critical9.3The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to privilege escalation.Check if you run itEPSS 0.41%May 28, 2026
- Critical9.3The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to an authentication bypass.Check if you run itEPSS 0.73%May 28, 2026
- High8.4An issue was discovered in Canonical Multipass before version 1.16.3.Check if you run itEPSS 0.45%May 28, 2026
- High7.3An issue in SMSGate sms-core<=2.1.13.6 allows a remote attacker to execute arbitrary code via the Cmpp7FDeliverRequestMessageCodec.java componentCheck if you run itEPSS 0.49%May 28, 2026
- High7.3Plack::Middleware::Security::Common versions before 0.13.1 for Perl did not block header injections in request paths.Check if you run itEPSS 0.34%May 28, 2026
- Medium6.2FlowIntel up to version 3.3.0 contains a server-side request forgery (SSRF) vulnerability in the external reference URL probe functionality in app/case/task.py.Check if you run itEPSS 0.42%May 28, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: batman-adv: stop tp_meter sessions during mesh teardown TP meter sessions remain linked on bat_priv…Check if you run itEPSS 0.14%May 28, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: ipmi: Add limits to event and receive message requests The driver would just fetch events and recei…Check if you run itEPSS 0.81%May 28, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl Just like in a previous problem in th…Check if you run itEPSS 0.17%May 28, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: usb: usblp: fix heap leak in IEEE 1284 device ID via short response usblp_ctrl_msg() collapses the…Check if you run itEPSS 0.17%May 28, 2026