Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A security flaw has been discovered in gyoridavid short-video-maker up to 1.3.4.Check if you run itEPSS 0.57%May 7, 2026
- High7.3This vulnerability, in the MAXHUB Pivot client application versions prior to v1.36.2, may allow an attacker to obtain encrypted tenant email addresses and related meta…Check if you run itEPSS 0.16%May 7, 2026
- Low2.1A vulnerability was identified in JeecgBoot up to 3.9.1.Check if you run itEPSS 0.20%May 7, 2026
- Low2.1A vulnerability was determined in 8421bit MiniClaw up to 43905b934cf76489ab28e4d17da28ee97970f91f.Check if you run itEPSS 0.41%May 7, 2026
- Low2.1A vulnerability was found in 8421bit MiniClaw up to 223c16a1088e138838dcbd18cd65a37c35ac5a84.Check if you run itEPSS 3.23%May 7, 2026
- Medium5.9A reflected HTML injection vulnerability was identified in the GitHub Enterprise Server Management Console login page that could allow credential theft.Check if you run itEPSS 0.16%May 7, 2026
- High7.9A server-side request forgery (SSRF) vulnerability was identified in the GitHub Enterprise Server notebook viewer that allowed an attacker to access internal services…Check if you run itEPSS 0.52%May 7, 2026
- Medium6.3A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause service disruption by sending crafted re…Check if you run itEPSS 0.39%May 7, 2026
- Medium6.3An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to create a local user account, bypassing th…Check if you run itEPSS 0.27%May 7, 2026
- High7.5Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.84%May 7, 2026
- Medium5.1Vvveb before 1.0.8.2 contains an unauthenticated reflected cross-site scripting vulnerability in the visual editor preview renderer that allows attackers to execute ar…Check if you run itEPSS 0.24%May 7, 2026
- Medium6.9Vvveb before 1.0.8.2 contains an information disclosure vulnerability in the cron controller that allows unauthenticated attackers to retrieve the application's secret cron key.Check if you run itEPSS 0.42%May 7, 2026
- High8.1Server-side request forgery (ssrf) in Azure Notification Service allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.83%May 7, 2026
- Medium6.3In OpenStack Cyborg before 16.0.1, the Accelerator Request (ARQ) API does not enforce project ownership at any layer.Check if you run itEPSS 0.21%May 7, 2026
- High7.4OpenStack Cyborg before 16.0.1 uses rule:allow (check_str='@') as the default policy for multiple API endpoints.Check if you run itEPSS 0.21%May 7, 2026
- Critical10.0Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 1.16%May 7, 2026
- Critical9.6Improper neutralization of special elements used in a command ('command injection') in Azure Cloud Shell allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.93%May 7, 2026
- High8.2Externally controlled reference to a resource in another sphere in Microsoft Partner Center allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.64%May 7, 2026
- Critical9.0Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.99%May 7, 2026
- Medium6.5Improper authorization in Microsoft Teams allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.72%May 7, 2026
- High7.5Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose inform…Check if you run itEPSS 1.14%May 7, 2026
- Critical9.9Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.71%May 7, 2026
- Medium6.1Improper neutralization of input during web page generation ('cross-site scripting') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.58%May 7, 2026
- High7.5Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.80%May 7, 2026
- High7.5Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.14%May 7, 2026
Sort