Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.0MISP’s OIDC authentication plugin allowed automatic linking of an OIDC identity to an existing local user account based on the email claim when the local account had n…Check if you run itEPSS 0.18%May 20, 2026
- Critical9.1An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras.Check if you run itEPSS 0.51%May 20, 2026
- High7.5Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation allows Excessive Allocation.Check if you run itEPSS 0.36%May 20, 2026
- High7.5Incorrect default permissions vulnerability in Progress Software MOVEit Automation allows Retrieve Embedded Sensitive Data.Check if you run itEPSS 0.28%May 20, 2026
- High7.5Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation allows Flooding.Check if you run itEPSS 0.40%May 20, 2026
- High7.6Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Beyaz Computer Software Design Industry and Trade Ltd.Check if you run itEPSS 0.22%May 20, 2026
- Medium5.3The affected Kieback & Peter DDC building controllers are vulnerable to cross-site scripting, enabling JavaScript to be executed by the victim's browser, which allows…Check if you run itEPSS 0.27%May 20, 2026
- High7.5Buffer Overflow vulnerability in EPSON L14150 FL27PB allows a remote attacker to execute arbitrary code via the RAW Printing Service (JetDirect) on TCP port 9100Check if you run itEPSS 0.65%May 20, 2026
- High7.5Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability.Check if you run itEPSS 0.35%May 20, 2026
- Medium4.1Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that allows attackers to cause incorrect Bitcoin addresses to be displayed by e…Check if you run itEPSS 0.14%May 20, 2026
- High7.5Uncontrolled Memory Allocation vulnerability in Progress Software MOVEit Automation allows Excessive Allocation.Check if you run itEPSS 0.35%May 20, 2026
- High8.2Allocation of Resources Without Limits or Throttling vulnerability in phenixdigital phoenix_storybook allows unauthenticated denial-of-service via BEAM atom table exhaustion.Check if you run itEPSS 0.54%May 20, 2026
- Critical9.5Code Injection vulnerability in phenixdigital phoenix_storybook allows unauthenticated remote code execution via unsanitized attribute value interpolation in HEEx temp…Check if you run itEPSS 2.11%May 20, 2026
- Low2.3Authorization Bypass Through User-Controlled Key vulnerability in phenixdigital phoenix_storybook allows cross-session PubSub topic injection via a URL query parameter.Check if you run itEPSS 0.45%May 20, 2026
- High8.7Twig versions 2.16.x and 3.9.0 through 3.25.x contain a sandbox bypass vulnerability when using a SourcePolicyInterface that allows attackers with template rendering c…Check if you run itEPSS 0.76%May 20, 2026
- High7.8A heap-based buffer overflow vulnerability exists in the Channel Splitting functionality of MediaInfoLib (version(s): 26.01).Check if you run itEPSS 0.25%May 20, 2026
- Medium6.5The HCL DominoIQ RAG feature is affected by a Broken Access Control vulnerability.Check if you run itEPSS 0.26%May 20, 2026
- Critical9.8Drupal Core SQL Injection VulnerabilityPatch nowKEVEPSS 89.38%May 20, 2026
- Medium5.3An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling a remote unauthenticated attacker to cause seve…Check if you run itEPSS 0.66%May 20, 2026
- Medium5.9Undefined behavior may result due to a race condition leading to a use-after-free violation.Check if you run itEPSS 1.39%May 20, 2026
- High7.5Multiple flaws have been identified in related to the handling of DNS messages whose CLASS is not Internet ( ) — for example, or , or DNS messages that specify meta-cl…Check if you run itEPSS 1.94%May 20, 2026
- High8.1Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.85%May 20, 2026
- Medium5.0Missing Authorization vulnerability in ADD-ONS.ORG PDF for Elementor Forms + Drag And Drop Template Builder allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.19%May 20, 2026
- High7.8Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.41%May 20, 2026
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITH YITH WooCommerce Product Add-Ons allows Blind SQL Injection.Check if you run itEPSS 0.29%May 20, 2026
Sort