Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Improper input validation for some Intel Endpoint Management Assistant (EMA) software before version 1.14.5 within Ring 3: User Applications may allow an escalation of privilege.Check if you run itEPSS 0.22%May 12, 2026
- Medium6.8Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Processors within VMX non-r…Check if you run itEPSS 0.10%May 12, 2026
- Medium5.4Uncontrolled search path for some Intel(R) Server Firmware Update Utility Software before version 16.0.12.Check if you run itEPSS 0.09%May 12, 2026
- Medium6.8Use after free for some Linux kernel driver for the Intel(R) Ethernet 800 series before version 2.3.14 within Ring 0: Kernel may allow a denial of service.Check if you run itEPSS 0.10%May 12, 2026
- Critical9.1Improper Authorization vulnerability when multiple method constraints define an HTTP method for the same extension in Apache Tomcat.Check if you run itEPSS 1.22%May 12, 2026
- Low3.7Observable Timing Discrepancy vulnerability when comparing AJP secret in Apache Tomcat.Check if you run itEPSS 0.35%May 12, 2026
- High7.5Improper Handling of Case Sensitivity vulnerability in LockOutRealm in Apache Tomcat.Check if you run itEPSS 0.50%May 12, 2026
- Critical9.8DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat.Check if you run itEPSS 1.33%May 12, 2026
- High7.3Exposure of HTTP Authentication Header to unexpected hosts during WebSocket authentication vulnerability in Apache Tomcat.Check if you run itEPSS 0.65%May 12, 2026
- Critical9.8Improper Input Validation vulnerability in Apache Tomcat.Check if you run itEPSS 1.70%May 12, 2026
- High7.5Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat.Check if you run itEPSS 0.84%May 12, 2026
- High7.6Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via graph container parameter.Check if you run itEPSS 0.27%May 12, 2026
- Critical9.8The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a remote code execution vulnerability in its Kubeflow component.Check if you run itEPSS 0.61%May 12, 2026
- Critical9.8The TinyZero project thru commit 6652a63c57fa7e5ccde3fc9c598c7176ff15b839 (2025-58-24) contains a critical command injection vulnerability (CWE-78) in its HDFS file op…Check if you run itEPSS 1.16%May 12, 2026
- High8.8The superduper project thru v0.10.0 contains a critical remote code execution vulnerability in its query parsing component.Check if you run itEPSS 0.40%May 12, 2026
- High8.8The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the MultitaskClassifier.load() method of the MultitaskClassifier class.Check if you run itEPSS 0.39%May 12, 2026
- High8.8The snorkel library thru v0.10.0 contains a critical insecure deserialization vulnerability (CWE-502) in the BaseLabeler.load() method of the BaseLabeler class.Check if you run itEPSS 0.39%May 12, 2026
- High8.8The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the Trainer.load() method of the Trainer class.Check if you run itEPSS 0.39%May 12, 2026
- High7.8PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism.Check if you run itEPSS 0.39%May 12, 2026
- Critical9.8PySyft (Syft Datasite/Server) versions 0.9.5 and earlier are vulnerable to remote code execution due to insufficient validation and sandboxing of user-submitted code.Check if you run itEPSS 0.63%May 12, 2026
- High8.8The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) is vulnerable…Check if you run itEPSS 0.56%May 12, 2026
- High8.8The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) is vulnerable…Check if you run itEPSS 0.56%May 12, 2026
- Critical9.8The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) allows arbitr…Check if you run itEPSS 0.43%May 12, 2026
- Critical9.1The nexent v1.7.5.2 backend service contains an unauthorized arbitrary storage file deletion vulnerability in its file management API.Check if you run itEPSS 0.40%May 12, 2026
- Critical9.1The nexent v1.7.5.2 backend service contains an unauthorized arbitrary file deletion vulnerability in its ElasticSearch service interface.Check if you run itEPSS 0.41%May 12, 2026
Sort