Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1Same-origin policy bypass in the DOM: Networking component.Check if you run itEPSS 0.42%May 19, 2026
- High7.3Use-after-free in the DOM: Bindings (WebIDL) component.Check if you run itEPSS 0.41%May 19, 2026
- High7.5Incorrect boundary conditions in the Audio/Video: Web Codecs component.Check if you run itEPSS 0.56%May 19, 2026
- High7.5Sandbox escape in Firefox and Firefox Focus for Android.Check if you run itEPSS 0.37%May 19, 2026
- Critical9.8Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations (CxfRsHeaderFilterStrategy…Check this weekEPSS 19.56%May 19, 2026
- Critical9.5HestiaCP versions 1.9.0 through 1.9.4 contain a deserialization vulnerability in the web terminal component caused by a session format mismatch between PHP and Node.js…Check if you run itEPSS 1.07%May 19, 2026
- High7.1Improper Handling of Syntactically Invalid Structure in Sparx Pro Cloud Server allows Denial of Service (DoS) attack to be executed by sending an specially crafted SQL query.Check if you run itEPSS 0.68%May 19, 2026
- High7.7Sparx Pro Cloud Server is vulnerable to a Race Condition in the /data_api/dl_internal_artifact.php endpoint.Check if you run itEPSS 0.72%May 19, 2026
- High8.7Sparx Enterprise Architect software has a security feature that limits user's actions to those specified in the role.Check if you run itEPSS 0.40%May 19, 2026
- Critical9.3Sparx Pro Cloud Server requires authentication based on requested URL.Check if you run itEPSS 0.94%May 19, 2026
- High8.7Sparx Pro Cloud Server is vulnerable to Broken Access Control within communication with the database.Check if you run itEPSS 0.60%May 19, 2026
- High7.8The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or PVH guest does a grant table version change fro…Check if you run itEPSS 0.12%May 19, 2026
- Medium6.5Any guest can cause xenstored to crash by issuing a XS_RESET_WATCHES command within a transaction due to an assert() triggering.Check if you run itEPSS 0.16%May 19, 2026
- Medium5.1A Stored HTML Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter.Check if you run itEPSS 0.19%May 19, 2026
- Medium4.8A Stored HTML Injection vulnerability was discovered in the Schedule Restore Archive functionality due to improper validation of an input parameter.Check if you run itEPSS 0.19%May 19, 2026
- Medium4.8A Stored HTML Injection vulnerability was discovered in the Users functionality due to improper validation of an input parameter.Check if you run itEPSS 0.19%May 19, 2026
- Medium4.8A Stored HTML Injection vulnerability was discovered in the Credentials Manager functionality due to improper validation of an input parameter.Check if you run itEPSS 0.19%May 19, 2026
- Medium5.1An Angular template injection vulnerability was discovered in the Reports functionality due to improper validation of an input parameter.Check if you run itEPSS 0.20%May 19, 2026
- Low1.8An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (Unix) allows a local attacker to load a rogue C…Check if you run itEPSS 0.09%May 19, 2026
- High7.5The Contest Gallery plugin for WordPress is vulnerable to SQL Injection via the 'form_input' parameter in versions up to, and including, 28.1.6.Check if you run itEPSS 0.39%May 19, 2026
- Critical9.8Piotnet piotnet_forms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.06%May 19, 2026
- Low1.6A possible information disclosure vulnerability exists in the Vaadin Maven plugin and Vaadin Gradle plugin that exposes the full set of environment variables in build…Check if you run itEPSS 0.12%May 19, 2026
- High7.1A flaw was found in Keycloak.Check if you run itEPSS 0.41%May 19, 2026
- High7.5A session fixation vulnerability was found in Keycloak's login-actions endpoints.Check if you run itEPSS 0.84%May 19, 2026
- High8.1A flaw was found in Keycloak's URL validation logic during redirect operations.Check if you run itEPSS 0.50%May 19, 2026
Sort