Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityPatch nowKEVEPSS 91.82%May 14, 2026
- Medium6.1A cross-site scripting (XSS) vulnerability exists in Alinto SOGo, version 5.12.7.Patch nowKEVEPSS 0.51%May 13, 2026
- High8.3CKAN is an open-source DMS (data management system) for powering data hubs and data portals.Patch nowKEVEPSS 2.19%May 13, 2026
- Critical9.2NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.Patch nowKEVEPSS 3.40%May 13, 2026
- High7.5theme-fusion avada_builder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.46%May 13, 2026
- High7.8Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityPatch nowKEVEPSS 96.89%May 13, 2026
- Critical9.3Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and GUARDIANWALL Mail Security Cloud (SaaS version).Patch nowKEVEPSS 0.73%May 13, 2026
- Unknowne-office e-office Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 32.90%May 13, 2026
- Critical9.8Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.Patch nowKEVEPSS 0.97%May 12, 2026
- High7.5lfprojects mlflow Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.21%May 11, 2026
- Critical9.6TanStack Unspecified VulnerabilityPatch nowKEVEPSS 1.05%May 11, 2026
- High8.8Grav is a file-based Web platform.Patch nowKEVEPSS 0.52%May 11, 2026
- High7.3Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.81%May 11, 2026
- High7.8Linux Kernel Out-of-bounds WritePatch nowKEVEPSS 2.26%May 11, 2026
- Unknowngetflightpath flightpath Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 62.57%May 11, 2026
- UnknownSonicWall SonicOS Use of Externally-Controlled Format StringPatch nowKEVEPSS 0.91%May 10, 2026
- High7.5An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash.Patch nowKEVEPSS 0.73%May 9, 2026
- High7.3PraisonAI is a multi-agent teams system.Patch nowKEVEPSS 0.82%May 8, 2026
- Critical9.3Daemon Tools Lite Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 0.96%May 8, 2026
- High8.8Linux Kernel Write-what-where ConditionPatch nowKEVEPSS 94.19%May 8, 2026
- High8.7BerriAI LiteLLM Command Injection VulnerabilityPatch nowKEVEPSS 92.57%May 7, 2026
- High7.2Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation VulnerabilityPatch nowKEVEPSS 2.54%May 7, 2026
- High8.8The Slider Revolution plugin for WordPress is vulnerable to Arbitrary File Upload in versions 7.0.0 to 7.0.10 via the '_get_media_url' and '_check_file_path' function.Patch nowKEVEPSS 0.79%May 7, 2026
- Medium6.1Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026.Patch nowKEVEPSS 0.33%May 7, 2026
- UnknownW3 Total Cache '_parse_dynamic_mfunc' Command InjectionPatch nowKEVEPSS 22.63%May 7, 2026