Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.4Insufficient logging in the entry export feature in Devolutions Server allows an authenticated user with export permissions to export a sealed entry without triggering…Check if you run itEPSS 0.22%May 22, 2026
- Medium4.3Improper access control in the entry documentation and attachment features in Devolutions Server allows an authenticated user with vault read access to retrieve the do…Check if you run itEPSS 0.21%May 22, 2026
- Medium5.0Improper input validation in the external authentication provider flow in Devolutions Server allows an unauthenticated remote attacker to redirect victims to an attack…Check if you run itEPSS 0.23%May 22, 2026
- Medium4.3Missing authorization in the user profile update feature in Devolutions Server allows an authenticated Active Directory user to modify their own profile attributes via…Check if you run itEPSS 0.21%May 22, 2026
- Medium4.3Missing authorization in the vault import feature in Devolutions Server 2026.1.16.0 and earlier allows a low-privileged authenticated user to create new vaults via a c…Check if you run itEPSS 0.21%May 22, 2026
- High7.6Improper handling of factor key state in the multi-factor authentication management feature in Devolutions Server allows an attacker with knowledge of a user's passwor…Check if you run itEPSS 0.32%May 22, 2026
- Low2.7Improper enforcement of the sealed-entry workflow in the entry sensitive-data retrieval feature in Devolutions Server allows an authenticated user with access to a sea…Check if you run itEPSS 0.25%May 22, 2026
- High7.1Improper authorization in the Active Directory browsing feature in Devolutions Server allows a low-privileged authenticated user to obtain authentication material asso…Check if you run itEPSS 0.25%May 22, 2026
- Medium4.3Improper access control in the entry activity log feature in Devolutions Server allows an authenticated user with access to an entry but without the required permissio…Check if you run itEPSS 0.23%May 22, 2026
- Medium6.1Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.Check if you run itEPSS 0.24%May 22, 2026
- Medium6.1Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.Check if you run itEPSS 0.22%May 22, 2026
- Medium6.1Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.Check if you run itEPSS 0.22%May 22, 2026
- Medium6.1Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.Check if you run itEPSS 0.22%May 22, 2026
- Medium6.5Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service.Check if you run itEPSS 0.33%May 22, 2026
- High7.5Dell Unisphere for PowerMax vApp version prior to 10.0.0.2, contains an authorization bypass vulnerability in the Unisphere for VMAX application running in vAppCheck if you run itEPSS 0.25%May 22, 2026
- High7.5Dell ECS, versions 3.5 and 3.6, contain an Improper Access Control in the Identity and Access Management (IAM) module.Check if you run itEPSS 0.35%May 22, 2026
- Critical9.2NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.Check this weekEPSS 10.86%May 22, 2026
- High8.8An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6 allows a remote unauthenticated attacker to execute arbitrary code.Check if you run itEPSS 0.56%May 22, 2026
- Low2.1Concrete CMS version 9.0 to 9.5.0 is vulnerable to Stored XSS via page name in the Atomik theme.Check if you run itEPSS 0.15%May 22, 2026
- Low2.3Concrete CMS 9.5.0 and below is vulnerable to IDOR + wrong-authorization-level in the Express association Reorder dialog.Check if you run itEPSS 0.24%May 22, 2026
- Low2.3Concrete CMS 9.5.0 and below is vulnerable to CSRF via Backend\File::approveVersion.Check if you run itEPSS 0.10%May 22, 2026
- Medium5.5Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the ssh.Check if you run itEPSS 0.07%May 22, 2026
- High7.5Directory traversal in Follett Software's Destiny Library Manager 22_0_2_rc1 and fixed in v.22.5 AU1 allows remote attackers to read arbitrary system and application f…Check if you run itEPSS 0.71%May 22, 2026
- Medium5.5Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability.Check if you run itEPSS 0.10%May 22, 2026
- Medium6.7Dell VxRail versions before 7.0.200 contain a Plain-text Password Storage Vulnerability in VxRail Manager.Check if you run itEPSS 0.12%May 22, 2026
Sort