Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8The software fails to enforce role-based access controls for certain Gateway API invocations.Check if you run itEPSS 0.17%May 11, 2026
- High7.5In Webhook API invocations, the component accepts user-supplied input for HTTP request headers without sufficient validation or sanitization, allowing these headers to…Check if you run itEPSS 0.19%May 11, 2026
- Medium5.6Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an authentication bypass by assumed-immutable data vulnerability in…Check if you run itEPSS 0.24%May 11, 2026
- High7.3Due to a lack of user account state validation during authentication, locked user accounts can be successfully authenticated using Magic Link or Pass Key methods.Check if you run itEPSS 0.23%May 11, 2026
- Medium4.3The check user account lock states feature within the email OTP flow fails to validate user input, allowing an attacker to infer the existence of registered user accounts.Check if you run itEPSS 0.18%May 11, 2026
- Medium6.5The OpenSearch logging provider, when configured with a URL that embeds credentials (for example ), wrote the full host URL — including the embedded credentials — into…Check if you run itEPSS 0.41%May 11, 2026
- Medium6.5The Elasticsearch logging provider, when configured with a URL that embeds credentials (for example ), wrote the full host URL — including the embedded credentials — i…Check if you run itEPSS 0.41%May 11, 2026
- Medium6.5WebDyne::Session versions before 3.003_704 for Perl generate the session id insecurely.Check if you run itEPSS 0.33%May 11, 2026
- Low2.9A flaw has been found in bettercap up to 2.41.5.Check if you run itEPSS 0.39%May 11, 2026
- Low2.9A vulnerability was detected in bettercap up to 2.41.5.Check if you run itEPSS 0.52%May 11, 2026
- High7.3Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.20%May 11, 2026
- Medium5.3Zephyr sockets created with can still negotiate a TLS 1.2 connection when both TLS versions are enabled in Kconfig, because the socket-level protocol selection is not…Check if you run itEPSS 0.24%May 11, 2026
- Low1.9A security vulnerability has been detected in npitre cramfs-tools up to 2.1.Check if you run itEPSS 0.17%May 11, 2026
- Medium5.1A weakness has been identified in D-Link DNS-320 2.06B01.Check if you run itEPSS 7.39%May 11, 2026
- Low2.0A security flaw has been discovered in D-Link DNS-320 2.06B01.Check if you run itEPSS 6.13%May 11, 2026
- Low2.0A vulnerability was identified in D-Link DNS-320 2.06B01.Check if you run itEPSS 5.10%May 11, 2026
- Low2.1A vulnerability was determined in Open5GS up to 2.7.7.Check if you run itEPSS 0.38%May 11, 2026
- Low2.1A vulnerability was found in Open5GS up to 2.7.7.Check if you run itEPSS 0.47%May 11, 2026
- Low2.1A vulnerability has been found in Open5GS up to 2.7.7.Check if you run itEPSS 0.37%May 11, 2026
- Low2.1A flaw has been found in Open5GS up to 2.7.7.Check if you run itEPSS 0.37%May 11, 2026
- Low2.1A vulnerability was detected in Open5GS up to 2.7.7.Check if you run itEPSS 0.46%May 11, 2026
- Low2.0A security vulnerability has been detected in Tenda AC6 15.03.06.23.Check if you run itEPSS 4.85%May 11, 2026
- Low2.1A weakness has been identified in Tenda AC6 15.03.06.23.Check if you run itEPSS 3.18%May 11, 2026
- Low2.0A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE01.Check if you run itEPSS 5.00%May 11, 2026
- Low1.9A vulnerability was identified in Devs Palace ERP Online up to 4.0.0.Check if you run itEPSS 0.20%May 11, 2026
Sort