Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Shopware SSO referer trust leading to an arbitrary redirect targetCheck if you run itEPSS 0.27%May 19, 2026
- Medium6.5Privilege escalation: non-admin user with user:create ACL can create admin accountsCheck if you run itEPSS 0.47%May 19, 2026
- Critical9.2NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-controlled NGINX variable (for example, $http_*, $arg_*,…Check if you run itEPSS 9.69%May 19, 2026
- Medium6.9Technitium DNS Server aggressively tries to fetch missing RRSIG records or mismatched DNSKEY records.Check if you run itEPSS 0.39%May 19, 2026
- Critical9.3Tyler Identity Local (TID-L) uses documented, default administrative credentials.Check if you run itEPSS 0.48%May 19, 2026
- High8.7HestiaCP versions 1.2.0 through 1.9.4 contain an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass authentication security controls by s…Check if you run itEPSS 0.24%May 19, 2026
- Medium5.3An issue was discovered in the Portrait Dell Color Management application before 3.7.0 for Dell monitors.Check if you run itEPSS 0.14%May 19, 2026
- Critical9.6A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used by the Glassfish gadget handler.Check if you run itEPSS 0.65%May 19, 2026
- Critical9.1An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console.Check if you run itEPSS 0.84%May 19, 2026
- High7.3An issue in gohttp commit 34ea51 allows attackers to execute a directory traversal via supplying a crafted request.Check if you run itEPSS 0.52%May 19, 2026
- High7.3An issue was discovered in ModelScope 1.25.0 allowing attackers to execute arbitrary code via crafted module listed in the configuration file (dey_mini.yaml) under the…Check if you run itEPSS 0.52%May 19, 2026
- High8.8Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 and Firefox 150.Check if you run itEPSS 0.47%May 19, 2026
- High8.8Memory safety bugs present in Firefox ESR 140.10 and Firefox 150.Check if you run itEPSS 0.36%May 19, 2026
- High8.8Memory safety bugs present in Firefox 150.Check if you run itEPSS 0.37%May 19, 2026
- High8.8Privilege escalation in the WebRTC: Audio/Video component.Check if you run itEPSS 0.33%May 19, 2026
- Medium6.5Same-origin policy bypass in the Networking: JAR component.Check if you run itEPSS 0.21%May 19, 2026
- High8.8Privilege escalation in the Security component.Check if you run itEPSS 0.31%May 19, 2026
- High8.1Mitigation bypass in the DOM: Security component.Check if you run itEPSS 0.29%May 19, 2026
- High7.5Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component.Check if you run itEPSS 0.41%May 19, 2026
- High7.5Information disclosure in the Graphics: WebGPU component.Check if you run itEPSS 0.33%May 19, 2026
- High7.5Information disclosure in the IP Protection component.Check if you run itEPSS 0.33%May 19, 2026
- High7.5Information disclosure in the DOM: Security component.Check if you run itEPSS 0.32%May 19, 2026
- High7.5Spoofing issue in the Popup Blocker component.Check if you run itEPSS 0.30%May 19, 2026
- High7.5Spoofing issue in the Web Speech component.Check if you run itEPSS 0.30%May 19, 2026
- High8.1Mitigation bypass in the DOM: Security component.Check if you run itEPSS 0.37%May 19, 2026
Sort