Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8WebdriverIO is a test automation framework for unit, e2e and component testing using WebDriver, WebDriver BiDi and Appium.Check if you run itEPSS 3.31%May 18, 2026
- High7.3Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.Check if you run itEPSS 0.21%May 18, 2026
- High7.3Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attackers to execute arbitrary commands by manipulat…Check if you run itEPSS 0.51%May 18, 2026
- Medium4.8Claude HUD through 0.0.12, patched in commit 234d9aa, contains a path traversal vulnerability that allows attackers to read arbitrary files by supplying an unvalidated…Check if you run itEPSS 0.13%May 18, 2026
- Low2.4Claude HUD through 0.0.12, patched in commit 234d9aa, constructs OSC 8 terminal hyperlink escape sequences using raw cwd and branchUrl values without stripping control…Check if you run itEPSS 0.10%May 18, 2026
- Medium6.8Summarize prior to 0.15.1 contains an insecure file permission vulnerability in the refresh-free configuration rewrite path that allows local users to read sensitive c…Check if you run itEPSS 0.14%May 18, 2026
- Medium4.6Summarize prior to 0.15.1 contains a vulnerability in the hover summary feature that allows malicious pages to dispatch synthetic mouseover events over attacker-contro…Check if you run itEPSS 0.33%May 18, 2026
- Low2.1Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval whe…Check if you run itEPSS 0.23%May 18, 2026
- Medium4.6HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios.Check if you run itEPSS 0.12%May 18, 2026
- Medium6.1SimpleSAMLphp-casserver is a CAS 1.0 and 2.0 compliant CAS server in the form of a SimpleSAMLphp module.Check if you run itEPSS 0.27%May 18, 2026
- High8.9A vulnerability was found in lwIP up to 2.2.1.Check if you run itEPSS 1.10%May 18, 2026
- Medium5.3Summarize prior to 0.15.1 contains a missing authorization vulnerability in the content script window.postMessage bridge that allows malicious pages to perform unautho…Check if you run itEPSS 0.19%May 18, 2026
- High7.1Summarize prior to 0.15.1 contains a path traversal vulnerability in the /v1/summarize daemon endpoint that allows authenticated callers to write files to arbitrary di…Check if you run itEPSS 0.40%May 18, 2026
- Medium5.3DumbAssets through 1.0.11 contains a stored cross-site scripting vulnerability in asset fields including name, description, modelNumber, serialNumber, and tags that ar…Check if you run itEPSS 0.19%May 18, 2026
- Critical9.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCheck if you run itEPSS 0.99%May 18, 2026
- Medium6.1Microsoft Edge (Chromium-based) Spoofing VulnerabilityCheck if you run itEPSS 0.30%May 18, 2026
- Medium5.4Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.Check if you run itEPSS 0.30%May 18, 2026
- High8.8DumbAssets through 1.0.11 contains a path traversal vulnerability in the POST /api/delete-file endpoint and filesToDelete array parameters that allows unauthenticated…Check if you run itEPSS 0.63%May 18, 2026
- Critical10.0Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.49%May 18, 2026
- Medium5.7NetBSD prior to commit ec8451e contains a signed integer overflow vulnerability in the cryptodev_op() function in sys/opencrypto/cryptodev.c where the local variable i…Check if you run itEPSS 0.11%May 18, 2026
- Medium5.7NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodev_op() within the opencrypto subsystem that allows local attackers to trigger a doubl…Check if you run itEPSS 0.08%May 18, 2026
- Medium6.1HSC MailInspector 5.3.3-7 is vulnerable to Cross Site Scripting (XSS) in the /police/WarningUrlPage.php endpoint due to improper neutralization of user-supplied input…Check if you run itEPSS 0.19%May 18, 2026
- Medium6.1HSC MailInspector v5.3.3-7 contains a Cross-Site Scripting (XSS) vulnerability in the /tap/tap.php endpoint due to improper neutralization of user-controlled input usi…Check if you run itEPSS 0.24%May 18, 2026
- High7.5HSC MailInspector 5.3.3-7 has a Path Traversal vulnerability due to improper validation of user-supplied input in the /tap/dw.php endpoint.Check if you run itEPSS 2.66%May 18, 2026
- High7.5HSC MailInspector v5.3.3-7 contains a Local File Inclusion (LFI) vulnerability caused by improper control of user-supplied file paths.Check if you run itEPSS 1.53%May 18, 2026
Sort