Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Algernon is a small self-contained pure-Go web server.Check if you run itEPSS 0.34%May 26, 2026
- High8.2Algernon is a small self-contained pure-Go web server.Check if you run itEPSS 0.18%May 26, 2026
- Medium5.9An improper validation of the search parameter of the com_media files API endpoint leads to a path traversal vulnerability.Check if you run itEPSS 0.52%May 26, 2026
- High7.5An improper validation of user-supplied input leads to a local file inclusion vulnerability.Check this weekEPSS 12.52%May 26, 2026
- High8.6An improper access check allows unauthorized access to com_config webservice endpoints.Check this weekEPSS 12.79%May 26, 2026
- Medium6.9Improperly validated order clauses lead to a SQL injection vulnerability in com_tags.Check if you run itEPSS 0.31%May 26, 2026
- Medium6.9Improperly built filter clauses lead to a SQL injection vulnerability in the search query for com_finder.Check if you run itEPSS 0.32%May 26, 2026
- Medium4.6Lack of CSRF token validation lead to a CSRF attack vector in the admin activation endpoint of com_users.Check if you run itEPSS 0.11%May 26, 2026
- Medium6.9Lack of output escaping leads to a XSS vector in the readmore links for com_content.Check if you run itEPSS 0.18%May 26, 2026
- Medium6.9Lack of output escaping leads to a XSS vector in the content history component.Check if you run itEPSS 0.18%May 26, 2026
- Critical9.2A vulnerability in the Google Cloud Apigee SetIntegrationRequest policy allowed remote attackers to perform Server-Side Request Forgery (SSRF) and exfiltrate service a…Check if you run itEPSS 0.36%May 26, 2026
- Medium6.9Lack of output escaping leads to a XSS vector in the multilingual associations component.Check if you run itEPSS 0.18%May 26, 2026
- Medium6.9Lack of output escaping leads to a XSS vector in the feed modules.Check if you run itEPSS 0.18%May 26, 2026
- Critical9.8NVIDIA Isaac Launchable for Linux contains a vulnerability where sensitive information is transmitted in clear text.Check if you run itEPSS 0.66%May 26, 2026
- High7.8NVIDIA Transformers4Rec for Linux contains a vulnerability where an attacker could cause improper deserialization of untrusted data.Check if you run itEPSS 0.42%May 26, 2026
- High7.5IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System uses default passwords default passwords from the manufacturing…Check if you run itEPSS 0.27%May 26, 2026
- Critical9.8IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System is vulnerable to SQL injection.Check if you run itEPSS 0.31%May 26, 2026
- Medium6.1IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.15 IBM Financial Transaction Manager SWIFT is vulnerable to cross-site scripting.Check if you run itEPSS 0.19%May 26, 2026
- Medium5.3IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files…Check if you run itEPSS 0.17%May 26, 2026
- High7.6IBM Cognos Analytics 11.2.0, 12.0, and 12.1.0 and IBM Cognos Transformer 12.0, 11.2.4, and 12.1.0 is vulnerable to stored cross-site scripting (XSS) in Cognos Adminstration.Check if you run itEPSS 0.18%May 26, 2026
- Medium5.4IBM webMethods Integration (on prem) -Integration Server 10.15 through IS_10.15_Core_Fix2611.1 to IS_11.1_Core_Fix10 IBM webMethods Integration is vulnerable to server…Check if you run itEPSS 0.18%May 26, 2026
- Medium5.5IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes DB2 Connect Server) stores potentially sensitive information in log file…Check if you run itEPSS 0.11%May 26, 2026
- High8.1FastNetMon Community Edition through 1.2.9 exposes a gRPC API server on port 50052 with no authentication mechanism.Check if you run itEPSS 0.23%May 26, 2026
- High7.5FastNetMon Community Edition through 1.2.9 contains multiple out-of-bounds reads in the BGP MP_REACH_NLRI IPv6 attribute decoder.Check if you run itEPSS 0.28%May 26, 2026
- Critical9.8FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the Juniper router integration plugin.Check if you run itEPSS 1.65%May 26, 2026
Sort