Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Cargo incorrectly handled symlinks inside of crate tarballs downloaded from third-party registries, allowing a malicious crate to override the source code of another c…Check if you run itEPSS 0.29%May 25, 2026
- Low2.3Cargo between 1.68 and 1.96 incorrectly normalized the URLs of third-party registries using the sparse index protocol.Check if you run itEPSS 0.48%May 25, 2026
- High8.1Apache Airflow providers-google's disables SSH host-key verification by default, exposing SSH traffic between an Airflow worker and a Compute Engine VM to in-path netw…Check if you run itEPSS 0.59%May 25, 2026
- Medium6.8A security vulnerability has been identified in Acer Care Center where the ACCSvc service creates a Named Pipe with a weak Security Descriptor.Check if you run itEPSS 0.17%May 25, 2026
- Low2.1A vulnerability was identified in Edimax BR-6478AC 1.23.Check this weekEPSS 16.60%May 25, 2026
- Low2.1A vulnerability was determined in Edimax BR-6675nD 1.12.Check if you run itEPSS 1.91%May 25, 2026
- Low2.1A vulnerability was found in yashpokharna2555 StudentManagementSystem cb2f558ddf8d19396de0f92abf2d224d46a0a203.Check if you run itEPSS 0.32%May 25, 2026
- Low2.1A vulnerability has been found in DTStack Taier 1.4.0.Check if you run itEPSS 2.24%May 25, 2026
- High8.9A flaw has been found in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 2.00%May 25, 2026
- High8.9A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 1.91%May 25, 2026
- Medium6.5Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to filter nil elements from outgoing webhook attachment payloads bef…Check if you run itEPSS 0.28%May 25, 2026
- Medium6.1A cross-site scripting (XSS) vulnerability exists in Apache ECharts in the Lines series tooltip rendering logic.Check if you run itEPSS 0.75%May 25, 2026
- High8.9A security vulnerability has been detected in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 1.73%May 25, 2026
- High8.9A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 1.73%May 25, 2026
- High8.9A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 1.73%May 25, 2026
- High7.4A vulnerability was identified in Tenda F1202 1.2.0.20(408).Check if you run itEPSS 0.44%May 25, 2026
- High7.4A vulnerability was determined in Tenda F1202 1.2.0.20(408).Check if you run itEPSS 0.44%May 25, 2026
- High7.4A vulnerability was found in Tenda F1202 1.2.0.20(408).Check if you run itEPSS 0.58%May 25, 2026
- High7.4A vulnerability has been found in Tenda F1202 1.2.0.20(408).Check if you run itEPSS 0.58%May 25, 2026
- Medium6.5Spring AI's support for Anthropic's Skills API used LLM-influenced filenames unsanitized in Path.resolve before writing files to disk.Check if you run itEPSS 0.40%May 25, 2026
- Critical9.0A vulnerability in MLflow versions <=3.10.1.dev0 allows unauthorized access to multipart upload (MPU) endpoints when the mode is enabled.Check if you run itEPSS 0.34%May 25, 2026
- High8.6Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure.Check if you run itEPSS 0.14%May 25, 2026
- High7.4A flaw has been found in Edimax EW-7438RPn 1.31.Check if you run itEPSS 0.45%May 25, 2026
- High7.4A vulnerability was detected in Edimax EW-7438RPn 1.31.Check if you run itEPSS 0.45%May 25, 2026
- High7.4A security vulnerability has been detected in Edimax EW-7438RPn 1.31.Check if you run itEPSS 0.45%May 25, 2026
Sort