Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Guardrails AI thru 0.6.7 contains a code injection vulnerability (CWE-94) in its Hub package installation mechanism.Check if you run itEPSS 0.64%May 12, 2026
- High8.8The CosyVoice project thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its model loading process.Check if you run itEPSS 0.46%May 12, 2026
- Critical9.8Cognee thru v0.4.0 contains a critical remote code execution vulnerability in its notebook cell execution API endpoint.Check if you run itEPSS 0.64%May 12, 2026
- Critical9.8The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection vulnerability in its Kubeflow component (robustness_evaluation_fgsm_pytorch.py).Check if you run itEPSS 0.55%May 12, 2026
- Critical9.8The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains an insecure deserialization vulnerability (CWE-502) in its Kubeflow component's model loading functionality.Check if you run itEPSS 0.60%May 12, 2026
- Critical9.1Insufficient ownership check in allows an authenticated client area user to submit requests using another user’s without any ownership validation leading to unauthoriz…Check if you run itEPSS 0.32%May 12, 2026
- Critical9.8A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.2 through 5.0.5, FortiSand…Check if you run itEPSS 0.73%May 12, 2026
- Medium6.5An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.0.0 through 6.0.2, FortiDeceptor 5.3.0…Check if you run itEPSS 0.24%May 12, 2026
- High8.8An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiNDR 7.6.0 through 7.6.2, FortiNDR 7.4.0 through…Check if you run itEPSS 0.26%May 12, 2026
- Medium6.7Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.32%May 12, 2026
- High8.5Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow an escalation of privilege.Check if you run itEPSS 0.11%May 12, 2026
- High8.5Out-of-bounds write for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a escalation of privilege.Check if you run itEPSS 0.11%May 12, 2026
- Medium5.3A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions,…Check if you run itEPSS 0.42%May 12, 2026
- Medium6.7An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAP 7.6.0 through 7.6.2, FortiAP 7.4.0 thro…Check if you run itEPSS 0.56%May 12, 2026
- High8.8A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allows attacker to execute unaut…Check if you run itEPSS 0.56%May 12, 2026
- High7.2An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3…Check if you run itEPSS 0.36%May 12, 2026
- Medium6.7An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability [CWE-78] vulnerability in Fortinet FortiAP 7.6.0 through 7.…Check if you run itEPSS 0.56%May 12, 2026
- High7.5An inconsistent user interface issue was addressed with improved state management.Check if you run itEPSS 0.23%May 12, 2026
- High8.8An access issue was addressed with additional sandbox restrictions.Check if you run itEPSS 0.12%May 12, 2026
- Medium4.3Missing authorization in the PAM module in Devolutions Server allows an authenticated user with a PAM license but no additional permissions to obtain OTP secret keys a…Check if you run itEPSS 0.20%May 12, 2026
- High7.3YAML::Syck versions before 1.38 for Perl has an out-of-bounds read.Check if you run itEPSS 0.40%May 12, 2026
- High8.2JunoClaw is an agentic AI platform built on Juno Network.Check if you run itEPSS 0.23%May 12, 2026
- Critical9.8JunoClaw is an agentic AI platform built on Juno Network.Check if you run itEPSS 0.22%May 12, 2026
- High8.4JunoClaw is an agentic AI platform built on Juno Network.Check if you run itEPSS 0.17%May 12, 2026
- High8.4JunoClaw is an agentic AI platform built on Juno Network.Check if you run itEPSS 0.15%May 12, 2026
Sort