Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5In Meari IoT SDK image handling (libmrplayer.so) as observed in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and related white-label apps (<= 1.8.x), baby mo…Check if you run itEPSS 0.17%May 11, 2026
- High7.5In Meari IoT Cloud alert image storage on Alibaba OSS (latest observed; storage service version not disclosed), motion snapshots are retrievable without authentication…Check if you run itEPSS 0.29%May 11, 2026
- High7.5In Meari client applications embedding "com.meari.sdk" (including CloudEdge 5.5.0 build 220, Arenti 1.8.1 build 220, and related white-label <= 1.8.x), the integrated…Check if you run itEPSS 0.24%May 11, 2026
- High7.7In Meari IoT Cloud MQTT Broker deployments running EMQX 4.x, any authenticated low-privilege account can subscribe to global wildcard topics and receive telemetry from…Check if you run itEPSS 0.27%May 11, 2026
- High7.3The flash-attention project thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 (2025-13-04) contains a code injection vulnerability (CWE-94) in its training script.Check if you run itEPSS 0.25%May 11, 2026
- High7.3The flash-attention training framework thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 (2025-13-04) contains an insecure deserialization vulnerability (CWE-502) i…Check if you run itEPSS 0.22%May 11, 2026
- Medium5.7CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its model loading component.Check if you run itEPSS 0.11%May 11, 2026
- High7.3CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its gRPC server component.Check if you run itEPSS 0.22%May 11, 2026
- High7.3CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its average_model.py model…Check if you run itEPSS 0.22%May 11, 2026
- High7.3CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its make_parquet_list.py da…Check if you run itEPSS 0.21%May 11, 2026
- High7.5Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks thru 2.61.0.Check if you run itEPSS 0.28%May 11, 2026
- Low2.1A security vulnerability has been detected in Open5GS up to 2.7.7.Check if you run itEPSS 0.37%May 11, 2026
- Low2.1A weakness has been identified in Open5GS up to 2.7.7.Check if you run itEPSS 0.38%May 11, 2026
- Medium6.9Improper restriction of excessive authentication attempts (CWE-307) in pgAdmin 4.Check if you run itEPSS 0.21%May 11, 2026
- High7.2Symbolic-link path traversal (CWE-61, CWE-22) in pgAdmin 4 File Manager.Check if you run itEPSS 0.33%May 11, 2026
- High7.3Deserialization of untrusted data (CWE-502) in pgAdmin 4 FileBackedSessionManager.Check if you run itEPSS 0.13%May 11, 2026
- High7.1Local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities in pgAdmin 4 LLM API configuration endpoints.Check if you run itEPSS 0.22%May 11, 2026
- High8.7OS command injection (CWE-78) vulnerability in pgAdmin 4 Import/Export query export.Check if you run itEPSS 1.44%May 11, 2026
- High8.7SQL injection vulnerability in pgAdmin 4 Maintenance Tool.Check if you run itEPSS 0.46%May 11, 2026
- Medium4.8Stored cross-site scripting (XSS) vulnerability in pgAdmin 4 Browser Tree and Explain Visualizer modules.Check if you run itEPSS 0.16%May 11, 2026
- Critical9.4Authorization vulnerability in pgAdmin 4 server mode affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules.Check if you run itEPSS 0.46%May 11, 2026
- Medium5.9An arbitrary file write vulnerability exists in Casdoor's Local File System storage provider.Check if you run itEPSS 0.51%May 11, 2026
- Medium6.0Corteza contains a SQL injection vulnerability in its Microsoft SQL Server (MSSQL) backend when filtering Compose records by the meta field.This issue affects corteza: 2024.9.8.Check if you run itEPSS 0.28%May 11, 2026
- Critical9.3Angular Expressions provides expressions for the Angular.JS web framework as a standalone module.Check if you run itEPSS 0.48%May 11, 2026
- Medium5.3Wagtail is an open source content management system built on Django.Check if you run itEPSS 0.26%May 11, 2026
Sort