Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Critical9.2NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.KEVEPSS 3.4%May 13, 2026
- High7.5theme-fusion avada_builder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVEPSS 0.5%May 13, 2026
- High7.8Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityKEVEPSS 96.9%May 13, 2026
- Critical9.3Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and GUARDIANWALL Mail Security Cloud (SaaS version).KEVEPSS 0.7%May 13, 2026
- Unknowne-office e-office Unrestricted Upload of File with Dangerous TypeKEVEPSS 32.9%May 13, 2026
- Critical9.8Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.KEVEPSS 1.0%May 12, 2026
- High7.5lfprojects mlflow Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVEPSS 3.2%May 11, 2026
- Critical9.6TanStack Unspecified VulnerabilityKEVEPSS 1.1%May 11, 2026
- High8.8Grav is a file-based Web platform.KEVEPSS 0.5%May 11, 2026
- High7.3Improper Control of Generation of Code ('Code Injection')KEVEPSS 0.8%May 11, 2026
- High7.8Linux Kernel Out-of-bounds WriteKEVEPSS 2.3%May 11, 2026
- Unknowngetflightpath flightpath Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVEPSS 62.6%May 11, 2026
- UnknownSonicWall SonicOS Use of Externally-Controlled Format StringKEVEPSS 0.9%May 10, 2026
- UnknownSonicWall SonicOS NULL Pointer DereferenceKEVEPSS 0.8%May 10, 2026
- High7.5An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash.KEVEPSS 0.7%May 9, 2026
- High7.3PraisonAI is a multi-agent teams system.KEVEPSS 0.8%May 8, 2026
- Critical9.3Daemon Tools Lite Embedded Malicious Code VulnerabilityKEVEPSS 1.0%May 8, 2026
- High8.8Linux Kernel Write-what-where ConditionKEVEPSS 94.2%May 8, 2026
- High8.7BerriAI LiteLLM Command Injection VulnerabilityKEVEPSS 92.6%May 7, 2026
- High7.2Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation VulnerabilityKEVEPSS 2.5%May 7, 2026
- High8.8The Slider Revolution plugin for WordPress is vulnerable to Arbitrary File Upload in versions 7.0.0 to 7.0.10 via the '_get_media_url' and '_check_file_path' function.KEVEPSS 0.8%May 7, 2026
- Medium6.1Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026.KEVEPSS 0.3%May 7, 2026
- UnknownW3 Total Cache '_parse_dynamic_mfunc' Command InjectionKEVEPSS 22.6%May 7, 2026
- Critical9.8OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.KEVEPSS 4.7%May 5, 2026
- Critical9.1Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')KEVEPSS 3.6%May 5, 2026