Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.4Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.56%May 14, 2026
- High8.8Improper Control of Generation of Code ('Code Injection') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc.Check if you run itEPSS 0.25%May 14, 2026
- High8.8Incorrect Authorization vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc.Check if you run itEPSS 0.22%May 14, 2026
- Low3.8A side-channel attack, which requires a physical presence to the TPM, can lead to extraction of an Elliptic Curve Diffie-Hellman (ECDH) key.Check if you run itEPSS 0.12%May 14, 2026
- Medium4.3CWE-601 URL redirection to untrusted site ('open redirect')Check if you run itEPSS 0.17%May 14, 2026
- High8.8Diffusers is the a library for pretrained diffusion models.Check if you run itEPSS 0.72%May 14, 2026
- High7.6Valtimo is an open-source business process automation platform.Check if you run itEPSS 0.20%May 14, 2026
- Low2.3Nextcloud News is an RSS/Atom feed reader.Check if you run itEPSS 0.18%May 14, 2026
- Medium6.5Kubetail is a real-time logging dashboard for Kubernetes.Check if you run itEPSS 0.17%May 14, 2026
- High8.8Diffusers is the a library for pretrained diffusion models.Check if you run itEPSS 1.07%May 14, 2026
- High7.4Katalyst Koi is a framework for building Rails admin functionality.Check if you run itEPSS 0.20%May 14, 2026
- Low2.5PoDoFo is a C++17 PDF manipulation library.Check if you run itEPSS 0.10%May 14, 2026
- Medium5.8css_parser is a Ruby CSS parser.Check if you run itEPSS 0.15%May 14, 2026
- Critical9.1Valtimo is an open-source business process automation platform.Check if you run itEPSS 0.58%May 14, 2026
- High8.6A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbitrary files that a…Check if you run itEPSS 1.09%May 14, 2026
- Medium5.4A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to mo…Check if you run itEPSS 0.19%May 14, 2026
- Medium5.4A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to el…Check if you run itEPSS 0.19%May 14, 2026
- Low2.6HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters.Check if you run itEPSS 0.11%May 14, 2026
- Low2.3HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured.Check if you run itEPSS 0.11%May 14, 2026
- Medium5.4HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced.Check if you run itEPSS 0.18%May 14, 2026
- Low3.0HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication.Check if you run itEPSS 0.14%May 14, 2026
- Medium4.3HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels.Check if you run itEPSS 0.08%May 14, 2026
- Medium5.4HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations.Check if you run itEPSS 0.05%May 14, 2026
- Low2.6HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields.Check if you run itEPSS 0.11%May 14, 2026
- Medium5.1HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed.Check if you run itEPSS 0.11%May 14, 2026
Sort