Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-…Check if you run itEPSS 0.62%May 12, 2026
- High7.2Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-…Check if you run itEPSS 0.62%May 12, 2026
- High7.2Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-…Check if you run itEPSS 0.62%May 12, 2026
- Medium6.5vLLM is an inference and serving engine for large language models (LLMs).Check if you run itEPSS 0.43%May 12, 2026
- Critical9.0ArcadeDB is a Multi-Model DBMS.Check if you run itEPSS 0.43%May 12, 2026
- Low3.2ciguard is a static security auditor for CI/CD pipelines.Check if you run itEPSS 0.15%May 12, 2026
- Medium6.6sse-channel is an SSE-implementation which can be used to any node.js http request/response stream.Check if you run itEPSS 0.54%May 12, 2026
- High7.4Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability…Check if you run itEPSS 0.82%May 12, 2026
- Critical9.8A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0.0, FortiAuthenticator 6.6.0 through 6.6.8, FortiAuthenticator 6.5.…Check if you run itEPSS 0.48%May 12, 2026
- High8.0Cleanuparr is a tool for automating the cleanup of unwanted or blocked files in Sonarr, Radarr, and supported download clients like qBittorrent.Check if you run itEPSS 0.19%May 12, 2026
- High8.2ssrfcheck is a library that checks if a string contains a potential SSRF attack.Check if you run itEPSS 0.36%May 12, 2026
- Medium4.3Kubewarden is a policy engine for Kubernetes.Check if you run itEPSS 0.27%May 12, 2026
- Medium6.1Fides is an open-source privacy engineering platform.Check if you run itEPSS 0.55%May 12, 2026
- Critical9.3DevGuard provides vulnerability management for the full software supply chain.Check if you run itEPSS 0.43%May 12, 2026
- Medium5.3linux-entra-sso is a browser plugin for Linux to SSO on Microsoft Entra ID.Check if you run itEPSS 0.31%May 12, 2026
- Medium6.5requests-hardened is a library that overrides the default behaviors of the requests library, and adds new security features.Check if you run itEPSS 0.39%May 12, 2026
- High7.7Xibo is an open source digital signage platform with a web content management system and Windows display player software.Check if you run itEPSS 0.42%May 12, 2026
- Medium5.3The mem0 1.0.0 server lacks authentication and authorization controls for its memory creation API endpoint (POST /memories).Check if you run itEPSS 0.48%May 12, 2026
- Medium6.5The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint (DELETE /memories/{memory_id}).Check if you run itEPSS 0.55%May 12, 2026
- Medium6.5The mem0 1.0.0 server lacks authentication and authorization controls for its memory reset and table re-creation functionality accessible via the DELETE /memories endpoint.Check if you run itEPSS 0.53%May 12, 2026
- Critical9.1The mem0 v1.0.0 server lacks authentication and authorization controls for its memory reset functionality accessible via the DELETE /memories endpoint.Check if you run itEPSS 0.74%May 12, 2026
- Medium6.5The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint (DELETE /memories).Check if you run itEPSS 0.55%May 12, 2026
- High7.5The mem0 1.0.0 server lacks authentication and authorization controls for its memory management API endpoints.Check if you run itEPSS 0.54%May 12, 2026
- Critical9.8Horovod thru 0.28.1 contains an insecure deserialization vulnerability (CWE-502) in its KVStore HTTP server component.Check if you run itEPSS 1.03%May 12, 2026
- Critical9.8Cognee thru v0.4.0 contains a critical remote code execution vulnerability in its notebook cell execution API endpoint.Check if you run itEPSS 0.93%May 12, 2026