Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Marten is a .NET Transactional Document DB and Event Store on PostgreSQL.Check if you run itEPSS 0.38%May 28, 2026
- High7.5Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.35%May 28, 2026
- High8.6Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.30%May 28, 2026
- Medium6.5Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130).Check if you run itEPSS 0.33%May 28, 2026
- Medium6.5Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130).Check if you run itEPSS 0.33%May 28, 2026
- High7.7Server-Side Request Forgery (CWE-918) in Kibana allows authenticated users with connector management privileges to bypass the operator-configured connection allowlist.Check if you run itEPSS 0.30%May 28, 2026
- High7.2Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.26%May 28, 2026
- Medium5.3Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.26%May 28, 2026
- Medium5.3Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.28%May 28, 2026
- High8.1Vulnerability in Oracle REST Data Services (component: Core).Check if you run itEPSS 0.27%May 28, 2026
- High7.9Vulnerability in Oracle REST Data Services (component: Core).Check if you run itEPSS 0.11%May 28, 2026
- Critical9.8Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera).Check if you run itEPSS 0.46%May 28, 2026
- High8.6A configuration weakness in the device’s remote management service allows an authenticated session to be established over a communication channel intended solely for v…Check if you run itEPSS 0.20%May 28, 2026
- High8.6A stack-based buffer overflow vulnerability in the charging controller’s signal-processing logic allows an attacker with physical access to the charging interface to s…Check if you run itEPSS 0.23%May 28, 2026
- Critical9.3A firmware update mechanism in the affected charging controller fails to validate the authenticity of firmware packages delivered through the device's management interface.Check if you run itEPSS 0.25%May 28, 2026
- Medium6.9Music Player Daemon (MPD) before version 0.24.11 contains a CRLF injection vulnerability in the xspf_char_data function within the XSPF playlist plugin that allows att…Check if you run itEPSS 0.26%May 28, 2026
- Medium6.9Music Player Daemon (MPD) before version 0.24.11 contains a server-side request forgery vulnerability in CurlInputPlugin where CURLOPT_FOLLOWLOCATION is set without CU…Check if you run itEPSS 0.28%May 28, 2026
- High8.7Music Player Daemon (MPD) before version 0.24.11 contains a path traversal vulnerability in LocalStorage::MapFSOrThrow and LocalStorage::MapUTF8 within the local stora…Check if you run itEPSS 0.64%May 28, 2026
- High8.8Music Player Daemon (MPD) before version 0.24.11 contains a stack buffer overflow vulnerability in the pcm_unpack_24be function in src/pcm/Pack.cxx that allows unauthe…Check if you run itEPSS 0.51%May 28, 2026
- Medium5.4Improper Neutralization of Input During Web Page Generation (CWE-79) in Kibana can lead to stored HTML injection.Check if you run itEPSS 0.14%May 28, 2026
- High8.5Insecure default settings of Portainer CE grant regular (non-admin) users privileges that allow host filesystem access and host-level code execution.Check if you run itEPSS 0.45%May 28, 2026
- Medium6.5Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130).Check if you run itEPSS 0.27%May 28, 2026
- Medium5.3Operation on a Resource after Expiration or Termination (CWE-672) in Kibana can lead to unauthorized information disclosure.Check if you run itEPSS 0.24%May 28, 2026
- High7.3A path traversal vulnerability was identified in Kibana's dashboard management functionality.Check if you run itEPSS 0.24%May 28, 2026
- High8.7DeepCode through commit c991dc2 contains a path traversal vulnerability in the SPA catch-all route in new_ui/backend/main.py that allows unauthenticated attackers to r…Check if you run itEPSS 0.38%May 28, 2026
Sort