Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7esm.sh is a no-build content delivery network (CDN) for web development.Check if you run itEPSS 0.44%May 28, 2026
- High8.2Espressif Shared GitHub DangerJS is a reusable GitHub Action CI DangerJS workflow for Espressif GitHub projects.Check if you run itEPSS 0.18%May 28, 2026
- High7.5CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers.Check if you run itEPSS 0.47%May 28, 2026
- High8.8phpMyFAQ before 4.1.3 contains an unauthenticated password reset vulnerability in the user password update API endpoint that allows attackers to change account passwor…Check if you run itEPSS 0.30%May 28, 2026
- High8.8phpMyFAQ before 4.1.3 contains an authentication bypass vulnerability in the password reset endpoint that allows unauthenticated attackers to reset any user account pa…Check if you run itEPSS 0.42%May 28, 2026
- High8.7phpMyFAQ before 4.1.3 contains an authentication bypass vulnerability in API v4.0 where the default empty api.apiClientToken allows unauthenticated users to create and…Check if you run itEPSS 0.48%May 28, 2026
- High8.7phpMyFAQ before 4.1.3 contains an insecure direct object reference vulnerability in the admin API user password endpoint that allows authenticated administrators to ch…Check if you run itEPSS 0.38%May 28, 2026
- Critical9.8Oracle E-Business Suite Improper Privilege Management VulnerabilityPatch nowKEVEPSS 12.31%May 28, 2026
- Low2.9Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core (HardenedObjectInputStream (logback-core) modules) allows Object Injection albeit h…Check if you run itEPSS 0.37%May 28, 2026
- Medium5.3A user with physical access to a smartphone can bypass authentication mechanism of Kidsview mobile application and grant himself full access to the device owner's acco…Check if you run itEPSS 0.21%May 28, 2026
- Critical9.3The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to privilege escalation.Check if you run itEPSS 0.52%May 28, 2026
- Critical9.3The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to an authentication bypass.Check if you run itEPSS 0.78%May 28, 2026
- High8.4An issue was discovered in Canonical Multipass before version 1.16.3.Check if you run itEPSS 0.51%May 28, 2026
- High7.8An issue was discovered in Canonical Multipass for macOS before version 1.16.3 due to an incomplete fix for CVE-2025-5199.Check if you run itEPSS 0.14%May 28, 2026
- Medium4.8bzip2 contains an off‑by‑one error in the bzip2recover utility.Check if you run itEPSS 0.13%May 28, 2026
- High7.3An issue in SMSGate sms-core<=2.1.13.6 allows a remote attacker to execute arbitrary code via the Cmpp7FDeliverRequestMessageCodec.java componentCheck if you run itEPSS 0.29%May 28, 2026
- High8.0An issue in Responsive File Manager Responsive FileManager Version 9.14.0 allows a remote attacker to execute arbitrary code via the force_download.php componentCheck if you run itEPSS 0.35%May 28, 2026
- UnknownRejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryMay 28, 2026
- High7.3Plack::Middleware::Security::Common versions before 0.13.1 for Perl did not block header injections in request paths.Check if you run itEPSS 0.23%May 28, 2026
- Medium4.3A vulnerability exists in Apache Artemis whereby an application using the STOMP protocol with security credentials that grant either the consume or send permission on…Check if you run itEPSS 0.37%May 28, 2026
- Medium6.2FlowIntel up to version 3.3.0 contains a server-side request forgery (SSRF) vulnerability in the external reference URL probe functionality in app/case/task.py.Check if you run itEPSS 0.23%May 28, 2026
- Medium6.0Dlink DWR-X1820 router uses weak default password generated from its IMEI number and does not require users to change it.Check if you run itEPSS 0.14%May 28, 2026
- High8.7Improper Certificate Validation vulnerability in ex-aws ex_aws_sns (ExAws.SNS, ExAws.SNS.PublicKeyCache modules) allows Signature Spoofing by Improper Validation.Check if you run itEPSS 0.23%May 28, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: fix use-after-free on registration failure Make sure to disable and free the interrup…Check if you run itEPSS 0.13%May 28, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix use-after-free in iris_release_internal_buffers() The recent change in commit 1dab…Check if you run itEPSS 0.12%May 28, 2026
Sort