Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3A race condition in the shared Extreme Platform ONE IAM Gateway API-key authentication path could, under specific high-concurrency traffic conditions, intermittently a…Check if you run itEPSS 0.26%May 29, 2026
- Medium5.3Spatie Laravel Media Library before version 11.23.0 contains a server-side request forgery vulnerability that allows remote attackers to cause the server to issue arbi…Check if you run itEPSS 0.42%May 29, 2026
- High8.7cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.49%May 29, 2026
- Critical9.9cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.41%May 29, 2026
- High7.7FastGPT is an AI Agent building platform.Check if you run itEPSS 0.36%May 29, 2026
- Critical9.3There is an authentication bypass vulnerability in the NI SystemLink Enterprise Dashboard application that may allow an unauthenticated remote attacker to bypass authe…Check if you run itEPSS 0.78%May 29, 2026
- High7.5In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on fetchApp requestsCheck if you run itEPSS 0.33%May 29, 2026
- Medium6.9SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speec…Check if you run itEPSS 0.41%May 29, 2026
- Medium5.4Statamic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.24%May 29, 2026
- Medium6.9Neotoma provides versioned records that persist across agent runs.Check if you run itEPSS 0.42%May 29, 2026
- High8.7xiaomusic v0.5.7 contains an unauthenticated path traversal vulnerability in the GET /music/{file_path:path} endpoint that allows unauthenticated attackers to read arb…Check if you run itEPSS 0.65%May 29, 2026
- High7.0MoviePilot v2 contains a server-side request forgery vulnerability in the image proxy endpoint that allows authenticated attackers to request arbitrary URLs by supplyi…Check if you run itEPSS 0.25%May 29, 2026
- Critical9.1GitHub CLI (gh) is GitHub’s official command line tool.Check if you run itEPSS 0.45%May 29, 2026
- High7.5OpenClaw before 2026.5.18 contains an authorization bypass vulnerability in QQBot native approval buttons that fails to enforce configured approver identity.Check if you run itEPSS 0.36%May 29, 2026
- Medium6.9A flaw has been found in Shibby Tomato 1.28.Check if you run itEPSS 0.28%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.27%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- Medium6.9PHP-SHOP 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to add administrative users by crafting malicious HTML forms.Check if you run itEPSS 0.16%May 29, 2026
- High8.7Heatmiser Wifi Thermostat 1.7 contains a credential disclosure vulnerability that allows unauthenticated attackers to retrieve administrative credentials by accessing…Check if you run itEPSS 0.31%May 29, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through t…Check if you run itEPSS 0.33%May 29, 2026