Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Improper privilege management in Azure Entra ID allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.55%May 22, 2026
- Critical9.8Improper neutralization of special elements used in a command ('command injection') in Microsoft Power Pages allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.58%May 22, 2026
- High8.7NukeViet CMS is a multi Content Management System.Check if you run itEPSS 0.42%May 22, 2026
- High8.1RT is an open source, enterprise-grade issue and ticket tracking system.Check if you run itEPSS 0.39%May 22, 2026
- High8.8RT is an open source, enterprise-grade issue and ticket tracking system.Check if you run itEPSS 0.34%May 22, 2026
- High7.1RT is an open source, enterprise-grade issue and ticket tracking system.Check if you run itEPSS 0.12%May 22, 2026
- Medium4.6RT is an open source, enterprise-grade issue and ticket tracking system.Check if you run itEPSS 0.17%May 22, 2026
- Medium5.1libheif is a HEIF and AVIF file format decoder and encoder.Check if you run itEPSS 0.30%May 22, 2026
- Medium6.5libheif is a HEIF and AVIF file format decoder and encoder.Check if you run itEPSS 0.25%May 22, 2026
- Medium4.3JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks.Check if you run itEPSS 0.15%May 22, 2026
- High8.7An authentication logic vulnerability in multiple TP-Link range extenders allows an unauthenticated attacker on an adjacent network to manipulate a login parameter and…Check if you run itEPSS 0.40%May 22, 2026
- High8.8The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Python files from model directo…Check if you run itEPSS 0.22%May 22, 2026
- High8.8The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, and runs without sandboxing.Check if you run itEPSS 0.22%May 22, 2026
- Medium5.5BentoML is a Python library for building online serving systems optimized for AI apps and model inference.Check if you run itEPSS 0.28%May 22, 2026
- High7.5Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.42%May 22, 2026
- Medium6.9Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.45%May 22, 2026
- High7.6Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.50%May 22, 2026
- High7.2Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.42%May 22, 2026
- Medium6.1Devise is an authentication solution for Rails based on Warden.Check if you run itEPSS 0.24%May 22, 2026
- Low3.3NewNTUnicodeString does not check for string length overflow.Check if you run itEPSS 0.11%May 22, 2026
- High7.5Insecure deserialization in the job results processing component in Amazon Braket SDK before 1.117.0 might allow a remote authenticated user with S3 write access to th…Check if you run itEPSS 0.38%May 22, 2026
- High8.8The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop.Check if you run itEPSS 0.21%May 22, 2026
- Critical9.3An issue was discovered in all versions of PCManFM-Qt starting from 1.1.0.Check if you run itEPSS 0.18%May 22, 2026
- High8.1authentik is an open-source identity provider.Check if you run itEPSS 0.55%May 22, 2026
- High7.1authentik is an open-source identity provider.Check if you run itEPSS 0.46%May 22, 2026
Sort