Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8The TinyZero project thru commit 6652a63c57fa7e5ccde3fc9c598c7176ff15b839 (2025-58-24) contains a critical command injection vulnerability (CWE-78) in its HDFS file op…Check if you run itEPSS 1.16%May 12, 2026
- High8.8The superduper project thru v0.10.0 contains a critical remote code execution vulnerability in its query parsing component.Check if you run itEPSS 0.40%May 12, 2026
- High8.8The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the MultitaskClassifier.load() method of the MultitaskClassifier class.Check if you run itEPSS 0.39%May 12, 2026
- High8.8The snorkel library thru v0.10.0 contains a critical insecure deserialization vulnerability (CWE-502) in the BaseLabeler.load() method of the BaseLabeler class.Check if you run itEPSS 0.39%May 12, 2026
- High8.8The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the Trainer.load() method of the Trainer class.Check if you run itEPSS 0.39%May 12, 2026
- High7.8PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism.Check if you run itEPSS 0.39%May 12, 2026
- Critical9.8PySyft (Syft Datasite/Server) versions 0.9.5 and earlier are vulnerable to remote code execution due to insufficient validation and sandboxing of user-submitted code.Check if you run itEPSS 0.63%May 12, 2026
- High8.8The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) is vulnerable…Check if you run itEPSS 0.56%May 12, 2026
- High8.8The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) is vulnerable…Check if you run itEPSS 0.56%May 12, 2026
- Critical9.8The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) allows arbitr…Check if you run itEPSS 0.43%May 12, 2026
- Critical9.1The nexent v1.7.5.2 backend service contains an unauthorized arbitrary storage file deletion vulnerability in its file management API.Check if you run itEPSS 0.40%May 12, 2026
- Critical9.1The nexent v1.7.5.2 backend service contains an unauthorized arbitrary file deletion vulnerability in its ElasticSearch service interface.Check if you run itEPSS 0.41%May 12, 2026
- Critical9.8The torch-checkpoint-shrink.py script in the ml-engineering project in commit 0099885db36a8f06556efe1faf552518852cb1e0 (2025-20-27) contains an insecure deserializatio…Check if you run itEPSS 0.49%May 12, 2026
- High7.1Server-Side Request Forgery vulnerability allows Privilege Escalation via API Checker extension.Check if you run itEPSS 0.30%May 12, 2026
- High7.6Session Fixation vulnerability allows Session Hijacking via crafted session ID.Check if you run itEPSS 0.27%May 12, 2026
- High7.1Cross-Site Request Forgery vulnerability allows an attacker to perform unauthorized actions via crafted web page.Check if you run itEPSS 0.14%May 12, 2026
- Critical9.1Insecure Default Initialization of Resource vulnerability allows Authentication Bypass via API access.Check if you run itEPSS 0.34%May 12, 2026
- Medium5.4An insecure direct object reference in MK-Auth 23.01K4.9 allows attackers to access and send support calls for other users via manipulation of the chamado parameter th…Check if you run itEPSS 0.17%May 12, 2026
- High8.0An arbitrary file upload vulnerability in MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted PHP file.Check if you run itEPSS 0.33%May 12, 2026
- Critical9.8Sandbox escape in the Profile Backup component.Check if you run itEPSS 0.31%May 12, 2026
- Medium6.5LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects.Check if you run itEPSS 0.27%May 12, 2026
- High8.8SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to achieve remote code execution.Check if you run itEPSS 6.31%May 12, 2026
- High7.8Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows a local authenticated attacker to escalate their privileges.Check if you run itEPSS 0.24%May 12, 2026
- Medium6.5An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to leak access credentials.Check if you run itEPSS 0.70%May 12, 2026
- High7.2OS command injection in Ivanti Virtual Traffic Manager before version 22.9r4 allows a remote authenticated attacker with admin privileges to achieve remote code execution.Check if you run itEPSS 1.91%May 12, 2026
Sort