Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Unknownsquirrelmail squirrelmail Improper Input ValidationKEVEPSS 32.2%May 20, 2026
- Critical9.8Piotnet piotnet_forms Unrestricted Upload of File with Dangerous TypeKEVEPSS 0.9%May 19, 2026
- Critical9.8Unrestricted Upload of File with Dangerous TypeKEVEPSS 0.9%May 19, 2026
- High7.5Microsoft Defender Denial of Service VulnerabilityKEVEPSS 1.3%May 19, 2026
- High7.8Microsoft Defender Link Following VulnerabilityKEVEPSS 0.4%May 19, 2026
- Critical10.0CtrlPanel is open-source billing software for hosting providers.KEVEPSS 4.5%May 19, 2026
- UnknownOracle marketing Missing Authentication for Critical FunctionKEVEPSS 0.6%May 19, 2026
- UnknownOracle marketing Missing Authentication for Critical FunctionKEVEPSS 0.6%May 19, 2026
- UnknownSonicWall SonicOS Authentication Bypass by Primary WeaknessKEVEPSS 0.5%May 19, 2026
- UnknownWindows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityKEVEPSS 22.2%May 19, 2026
- Critical9.3dify dify Relative Path TraversalKEVEPSS 1.9%May 18, 2026
- UnknownImproper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')KEVEPSS 2.7%May 18, 2026
- UnknownAsusWRT 'handle_request' Function Authentication BypassKEVEPSS 87.3%May 17, 2026
- Unknowncomfy comfyui-manager Unprotected Alternate ChannelKEVEPSS 1.4%May 16, 2026
- Unknownonedev_project onedev Exposure of Sensitive Information to an Unauthorized ActorKEVEPSS 24.5%May 16, 2026
- Unknownwelaunch wordpress_country_selector Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVEPSS 1.4%May 16, 2026
- High8.8The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 3.28.36.KEVEPSS 0.8%May 15, 2026
- High8.6lfprojects mlflow Authentication Bypass by Primary WeaknessKEVEPSS 1.4%May 15, 2026
- Critical9.4Gotenberg is a Docker-powered stateless API for PDF files.KEVEPSS 1.8%May 14, 2026
- Critical9.8Gotenberg is a Docker-powered stateless API for PDF files.KEVEPSS 3.7%May 14, 2026
- Critical9.8The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to Authentication Bypass in versions 3.4.0 to 3.4.1.1.KEVMay 14, 2026
- High8.7FunnelKit funnel_builder Missing AuthorizationKEVEPSS 0.5%May 14, 2026
- Medium6.1Microsoft Exchange Server Cross-Site Scripting VulnerabilityKEVEPSS 0.5%May 14, 2026
- Critical10.0Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityKEVEPSS 91.8%May 14, 2026
- Medium6.1A cross-site scripting (XSS) vulnerability exists in Alinto SOGo, version 5.12.7.KEVMay 13, 2026