Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Cross-Site Request Forgery (CSRF) vulnerability in InfoScale v.9.1.3 Operations Manager (VIOM) allows an attacker to force the user with an active session into clickin…Check if you run itEPSS 0.20%May 20, 2026
- Medium5.4InfoScale VIOM 9.1.3 allows XSS.Check if you run itEPSS 0.21%May 20, 2026
- Medium6.5SQL injection in InfoScale VIOM before v9.1.3 allows remote attackers to escalate privileges.Check if you run itEPSS 0.31%May 20, 2026
- Critical10.0A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with t…Check if you run itEPSS 0.83%May 20, 2026
- Medium6.3A vulnerability in the BrowserBot component of Cisco ThousandEyes Enterprise Agent could have allowed an authenticated, remote attacker to execute arbitrary commands o…Check if you run itEPSS 0.42%May 20, 2026
- High7.2A vulnerability in the SSL certificate handling of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to execute commands on the underl…Check if you run itEPSS 0.44%May 20, 2026
- Medium6.8A vulnerability in the Border Gateway Protocol (BGP) enforce-first-as feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX…Check if you run itEPSS 0.47%May 20, 2026
- Medium6.0MISP’s OIDC authentication plugin allowed automatic linking of an OIDC identity to an existing local user account based on the email claim when the local account had n…Check if you run itEPSS 0.18%May 20, 2026
- Critical9.1An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras.Check if you run itEPSS 0.51%May 20, 2026
- High7.5Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation allows Excessive Allocation.Check if you run itEPSS 0.36%May 20, 2026
- High7.5Incorrect default permissions vulnerability in Progress Software MOVEit Automation allows Retrieve Embedded Sensitive Data.Check if you run itEPSS 0.28%May 20, 2026
- High7.5Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation allows Flooding.Check if you run itEPSS 0.40%May 20, 2026
- High7.6Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Beyaz Computer Software Design Industry and Trade Ltd.Check if you run itEPSS 0.22%May 20, 2026
- Medium5.3The affected Kieback & Peter DDC building controllers are vulnerable to cross-site scripting, enabling JavaScript to be executed by the victim's browser, which allows…Check if you run itEPSS 0.27%May 20, 2026
- High7.5Buffer Overflow vulnerability in EPSON L14150 FL27PB allows a remote attacker to execute arbitrary code via the RAW Printing Service (JetDirect) on TCP port 9100Check if you run itEPSS 0.65%May 20, 2026
- High7.5Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability.Check if you run itEPSS 0.35%May 20, 2026
- Medium4.1Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that allows attackers to cause incorrect Bitcoin addresses to be displayed by e…Check if you run itEPSS 0.14%May 20, 2026
- High7.5Uncontrolled Memory Allocation vulnerability in Progress Software MOVEit Automation allows Excessive Allocation.Check if you run itEPSS 0.35%May 20, 2026
- High8.2Allocation of Resources Without Limits or Throttling vulnerability in phenixdigital phoenix_storybook allows unauthenticated denial-of-service via BEAM atom table exhaustion.Check if you run itEPSS 0.54%May 20, 2026
- Critical9.5Code Injection vulnerability in phenixdigital phoenix_storybook allows unauthenticated remote code execution via unsanitized attribute value interpolation in HEEx temp…Check if you run itEPSS 2.11%May 20, 2026
- Low2.3Authorization Bypass Through User-Controlled Key vulnerability in phenixdigital phoenix_storybook allows cross-session PubSub topic injection via a URL query parameter.Check if you run itEPSS 0.45%May 20, 2026
- High8.7Twig versions 2.16.x and 3.9.0 through 3.25.x contain a sandbox bypass vulnerability when using a SourcePolicyInterface that allows attackers with template rendering c…Check if you run itEPSS 0.76%May 20, 2026
- High7.8A heap-based buffer overflow vulnerability exists in the Channel Splitting functionality of MediaInfoLib (version(s): 26.01).Check if you run itEPSS 0.25%May 20, 2026
- Medium6.5The HCL DominoIQ RAG feature is affected by a Broken Access Control vulnerability.Check if you run itEPSS 0.26%May 20, 2026
- Critical9.8Drupal Core SQL Injection VulnerabilityPatch nowKEVEPSS 89.38%May 20, 2026
Sort