Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3TP-Link has identified a vulnerability in Tapo L535E v1.0 and v3.0, Tapo P300 v1.0, and Tapo D100C v1.0, where Bluetooth communication during the initial setup phase i…Check if you run itEPSS 0.10%May 28, 2026
- Critical9.1In Casdoor versions 2.362.0 and earlier, the SAML callback handler in controllers/auth.go accepts any well-formed SAMLResponse sent to /api/acs without verifying that…Check if you run itEPSS 0.23%May 28, 2026
- Critical9.8Casdoor versions 2.362.0 and earlier do not verify that a JWT used for token exchange is still active.Check if you run itEPSS 0.40%May 28, 2026
- High7.5Casdoor versions 2.362.0 and earlier do not enforce SAML assertion time bounds.Check if you run itEPSS 0.33%May 28, 2026
- High8.1Casdoor versions 2.362.0 and earlier map SAML assertions to user sessions without replay protection.Check if you run itEPSS 0.30%May 28, 2026
- Critical9.8Casdoor versions 2.362.0 and earlier contain a vulnerability enabling cross-organization token exchange.Check if you run itEPSS 0.42%May 28, 2026
- Critical9.8In Casdoor versions 2.362.0 and earlier, the SAML service provider implementation does not validate the AudienceRestriction element in SAML assertions.Check if you run itEPSS 0.36%May 28, 2026
- Critical9.1Casdoor versions 2.362.0 and earlier contain a vulnerability involving unverified email binding that may enable account takeover.Check if you run itEPSS 0.32%May 28, 2026
- Medium5.3Casdoor versions 2.362.0 and earlier contain a logic flaw in the social‑login binding flow that allows users to bypass configured MFA requirements.Check if you run itEPSS 0.32%May 28, 2026
- Critical9.1Casdoor versions 2.362.0 and earlier contain a vulnerability that allows an attacker to bypass authentication by supplying an arbitrary signing certificate.Check if you run itEPSS 0.22%May 28, 2026
- High8.7Due to improper enforcement of authentication rate-limiting on a debug SSH service in Archer C64 v1, the SSH service allows unlimited authentication attempts and uses…Check if you run itEPSS 0.51%May 28, 2026
- High7.2When calicoctl is invoked with --log-level=info or --log-level=debug, the client prints the full contents of its loaded connection-configuration struct to stderr in a…Check if you run itEPSS 0.22%May 28, 2026
- Medium5.3Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.26%May 28, 2026
- Medium5.3Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.22%May 28, 2026
- Medium5.3Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.24%May 28, 2026
- Medium6.5Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.20%May 28, 2026
- Medium5.3opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API.Check if you run itEPSS 1.10%May 28, 2026
- Critical9.3GitButler is a modern Git-based version control interface for AI-powered workflows.Check if you run itEPSS 0.52%May 28, 2026
- Medium6.8Synapse is an open source Matrix homeserver implementation.Check if you run itEPSS 0.13%May 28, 2026
- Medium5.1Synapse is an open source Matrix homeserver implementation.Check if you run itEPSS 0.37%May 28, 2026
- High8.7Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node.Check if you run itEPSS 0.41%May 28, 2026
- Critical9.4CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments.Check if you run itEPSS 0.48%May 28, 2026
- High8.6Zed is a code editor.Check if you run itEPSS 0.28%May 28, 2026
- High8.6Zed is a code editor.Check if you run itEPSS 0.30%May 28, 2026
- High7.8Zed is a code editor.Check if you run itEPSS 0.23%May 28, 2026
Sort