Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8scalar/astro v0.1.13 was discovered to contain a Server-Side Request Forgery (SSRF) in the scalar_url query parameter of the Scalar Proxy endpoint.Check if you run itEPSS 0.63%May 19, 2026
- Critical9.2NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-controlled NGINX variable (for example, $http_*, $arg_*,…Check if you run itEPSS 0.79%May 19, 2026
- High8.7HestiaCP versions 1.2.0 through 1.9.4 contain an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass authentication security controls by s…Check if you run itEPSS 0.36%May 19, 2026
- Critical9.1An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console.Check if you run itEPSS 0.83%May 19, 2026
- High7.3An issue in gohttp commit 34ea51 allows attackers to execute a directory traversal via supplying a crafted request.Check if you run itEPSS 0.52%May 19, 2026
- Critical9.8Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations (CxfRsHeaderFilterStrategy…Check if you run itEPSS 1.60%May 19, 2026
- High7.7Sparx Pro Cloud Server is vulnerable to a Race Condition in the /data_api/dl_internal_artifact.php endpoint.Check if you run itEPSS 0.66%May 19, 2026
- Critical9.3Sparx Pro Cloud Server requires authentication based on requested URL.Check if you run itEPSS 0.91%May 19, 2026
- High8.1A flaw was found in Keycloak's URL validation logic during redirect operations.Check if you run itEPSS 0.50%May 19, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Fix handling of MAY_BACKLOG requests MAY_BACKLOG requests can return EBUSY.Check if you run itEPSS 0.62%May 19, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() Yiming reports an integer underfl…Check if you run itEPSS 0.16%May 19, 2026
- Medium4.3A flaw was found in Keycloak.Check if you run itEPSS 0.42%May 19, 2026
- Medium5.9The OOXML parsing of the file indexer does not disable external entity resolution.Check if you run itEPSS 0.39%May 19, 2026
- High7.5Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz.Check if you run itEPSS 0.58%May 19, 2026
- Critical9.6In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints.Check if you run itEPSS 0.41%May 19, 2026
- High7.3Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz via Content component operations.Check if you run itEPSS 0.61%May 19, 2026
- Medium5.0AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.Check if you run itEPSS 0.37%May 19, 2026
- High7.5AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.Check if you run itEPSS 0.51%May 19, 2026
- Medium5.3Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.41%May 19, 2026
- Critical10.0CtrlPanel is open-source billing software for hosting providers.Patch nowKEVEPSS 4.54%May 19, 2026
- Low2.4Claude HUD through 0.0.12, patched in commit 234d9aa, constructs OSC 8 terminal hyperlink escape sequences using raw cwd and branchUrl values without stripping control…Check if you run itEPSS 0.15%May 18, 2026
- Medium4.6Summarize prior to 0.15.1 contains a vulnerability in the hover summary feature that allows malicious pages to dispatch synthetic mouseover events over attacker-contro…Check if you run itEPSS 0.45%May 18, 2026
- High7.1Summarize prior to 0.15.1 contains a path traversal vulnerability in the /v1/summarize daemon endpoint that allows authenticated callers to write files to arbitrary di…Check if you run itEPSS 0.71%May 18, 2026
- Critical9.1Incorrect access control in the /uci/get/ endpoint of NOVUS AirGate 4G firmware v1.1.16 allows unauthenticated attackers to obtain administrator credentials via a craf…Check if you run itEPSS 0.24%May 18, 2026
- Critical9.3dify dify Relative Path TraversalPatch nowKEVEPSS 1.89%May 18, 2026