Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8In ScadaBR version 1.2.0, a Missing Authentication for Critical Function vulnerability could allow an unauthenticated attacker to send a HTTP GET requests to the SCADA…Check if you run itEPSS 0.45%May 19, 2026
- High8.7Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected systemCheck if you run itEPSS 0.52%May 19, 2026
- High8.6Windmill prior to 1.703.2 contains an incorrect default permissions vulnerability in nsjail sandbox configuration files where /etc is bind-mounted without read-write r…Check if you run itEPSS 0.28%May 19, 2026
- High8.8Kitty is a cross-platform GPU based terminal.Check if you run itEPSS 0.38%May 19, 2026
- Medium5.9NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.Check if you run itEPSS 0.40%May 19, 2026
- Medium4.6In the web management interface of Archer AX72 (SG) v1, the network diagnostic feature improperly handles invalid user input, resulting in limited exposure of diagnost…Check if you run itEPSS 0.22%May 19, 2026
- Critical9.2Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in uploaded IaC templates when running in server mode.Check if you run itEPSS 0.48%May 19, 2026
- Critical9.2Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the remote_url parameter in the remote directory scan endpoint (POST /v1/{iac}/{ia…Check if you run itEPSS 0.48%May 19, 2026
- High8.7Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the webhook_url parameter in the file scan endpoint (POST /v1/{iac}/{iacVersion}/{…Check if you run itEPSS 0.50%May 19, 2026
- Critical9.8An authentication bypass vulnerability exists in the embedded HTTP server of Panabit PAP-XM320 up to and including v7.7.Check if you run itEPSS 1.27%May 19, 2026
- High8.8A command injection vulnerability exists in the /cgi-bin/tools/ajax_cmd endpoint of Panabit PAP-XM320 up to and including v7.7.Check if you run itEPSS 1.67%May 19, 2026
- Medium5.4A command injection vulnerability exists in Panabit PAP-XM320 up to and including V7.7.Check if you run itEPSS 0.74%May 19, 2026
- Medium6.5Firefox for iOS hosted Reader mode on an unauthenticated local web server, allowing another application on the same device to request arbitrary URLs and receive the re…Check if you run itEPSS 0.19%May 19, 2026
- High8.4An improper authentication vulnerability was discovered in the Motorola Factory Test component (com.motorola.motocit).Check if you run itEPSS 0.31%May 19, 2026
- Critical9.8An OS command injection vulnerability in the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 allows remote attackers to execute arbitrary commands via…Check if you run itEPSS 1.62%May 19, 2026
- Critical9.8The JSONSerializer and CBORSerializer in APScheduler (all versions including 3.10.x and 4.0.0a5) are vulnerable to Remote Code Execution (RCE) via Insecure Deserialization.Check if you run itEPSS 0.81%May 19, 2026
- Critical9.1API endpoints in LalanaChami Pharmacy Management System (commit 5c3d028) lack authentication middleware.Check if you run itEPSS 0.55%May 19, 2026
- Critical9.8The LalanaChami Pharmacy Management System (commit 5c3d028) allows unauthenticated remote attackers to escalate privileges by self-assigning an administrative role dur…Check if you run itEPSS 0.48%May 19, 2026
- High8.8BillaBear (all versions prior to Jan 2026) contains a SQL Injection vulnerability in the EventRepository.Check if you run itEPSS 0.36%May 19, 2026
- Critical9.8scalar/astro v0.1.13 was discovered to contain a Server-Side Request Forgery (SSRF) in the scalar_url query parameter of the Scalar Proxy endpoint.Check if you run itEPSS 0.47%May 19, 2026
- Critical9.8scalar/astro v0.1.13 was discovered to contain an arbitrary file upload vulnerability in the the scalar_url query parameter of the Scalar Proxy endpoint.Check if you run itEPSS 0.53%May 19, 2026
- Medium4.1SSRF in Media External-Link Endpoint Bypasses IP ValidationCheck if you run itEPSS 0.37%May 19, 2026
- Medium4.9Stored XSS via SVG file upload — no SVG sanitizationCheck if you run itEPSS 0.48%May 19, 2026
- Medium4.3Unauthorized Payment Trigger for Foreign Orders via /store-api/handle-paymentCheck if you run itEPSS 0.41%May 19, 2026
- Medium6.5Admin API ACL Bypass in Order State Transition EndpointsCheck if you run itEPSS 0.39%May 19, 2026
Sort