Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3Use-after-free in the JavaScript: WebAssembly component.Check if you run itEPSS 0.50%May 12, 2026
- High8.8JIT miscompilation in the JavaScript Engine: JIT component.Check if you run itEPSS 0.42%May 12, 2026
- Medium6.5Incorrect boundary conditions in the JavaScript Engine: JIT component.Check if you run itEPSS 0.24%May 12, 2026
- High7.1CWE-22: Improper Limitation of a Pathname to a Restricted Directory (“Path Traversal”) vulnerability that could cause unauthorized access to sensitive files when user-…Check if you run itEPSS 0.30%May 12, 2026
- Critical9.1sealed-env is a cross-stack, zero-trust secret management library for Node.js and Java/Spring Boot.Check if you run itEPSS 0.33%May 12, 2026
- Low2.1Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.24%May 12, 2026
- High8.7pam_authnft is a PAM session module binding nftables firewall rules to authenticated sessions via cgroupv2 inodes.Check if you run itEPSS 0.26%May 12, 2026
- Medium4.3An attacker can cause uncontrolled memory usage with excessive bracing over IMAP.Check if you run itEPSS 0.62%May 12, 2026
- Medium6.7Dell PowerScale InsightIQ, versions 5.0.0 through 6.2.0, contains an execution with unnecessary privileges vulnerability.Check if you run itEPSS 0.12%May 12, 2026
- Medium4.3Attacker can use the IMAP SETACL command to inject the anyone permission to user's dovecot-acl file even if imap_acl_allow_anyone=no.Check if you run itEPSS 0.26%May 12, 2026
- Medium6.5Attacker can upload a malicious Sieve script over ManageSieve service (or locally) to bypass configured CPU time limits for Sieve up to 130 times of the configured limit.Check if you run itEPSS 0.34%May 12, 2026
- High8.2Dell PowerScale InsightIQ, versions 6.0.0 through 6.2.0, contains an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability.Check if you run itEPSS 0.46%May 12, 2026
- Medium5.3Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS channel binding.Check if you run itEPSS 0.21%May 12, 2026
- Critical9.1When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabling unsafe data to be unescaped.Check if you run itEPSS 0.41%May 12, 2026
- High7.3Siemens Simcenter Femap contains a memory corruption vulnerability while parsing specially crafted IPT files.Check if you run itEPSS 0.20%May 12, 2026
- Medium4.7The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper that may allow reading an out-of-sandbox file.Check if you run itEPSS 0.15%May 12, 2026
- High8.7CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the network can exploit weaknesses in session‑management protections.Check if you run itEPSS 0.31%May 12, 2026
- High7.7Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel wp-travel allows Blind SQL Injection.This iss…Check if you run itEPSS 0.22%May 12, 2026
- Medium5.3Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Retrieve Embedded Sensitive Data.This issue affects WP Easy…Check if you run itEPSS 0.20%May 12, 2026
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows Blind SQL…Check if you run itEPSS 0.22%May 12, 2026
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 BEAR woo-bulk-editor allows Blind SQL Injection.This i…Check if you run itEPSS 0.23%May 12, 2026
- Medium5.3Missing Authorization vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster wp-asset-clean-up allows Exploiting Incorrectly Configured Access Control Security…Check if you run itEPSS 0.22%May 12, 2026
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal APIExperts Square for WooCommerce woosquare allows Bli…Check if you run itEPSS 0.22%May 12, 2026
- Medium5.4Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec…Check if you run itEPSS 0.17%May 12, 2026
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Views for WPForms views-for-wpforms-lite allows Blind SQL In…Check if you run itEPSS 0.22%May 12, 2026
Sort