Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A vulnerability has been found in omec-project amf up to 2.1.1.Check if you run itEPSS 0.40%May 23, 2026
- Low2.1A vulnerability was detected in omec-project amf up to 2.1.1.Check if you run itEPSS 0.40%May 23, 2026
- Low2.1A security vulnerability has been detected in Edimax BR-6428NS 1.10.Check if you run itEPSS 2.38%May 23, 2026
- Low2.1A weakness has been identified in Edimax BR-6428NS 1.10.Check if you run itEPSS 2.38%May 23, 2026
- High7.4A security flaw has been discovered in Edimax BR-6428NS 1.10.Check if you run itEPSS 0.80%May 23, 2026
- High7.4A vulnerability was identified in Edimax BR-6428NS 1.10.Check if you run itEPSS 0.80%May 23, 2026
- High8.2The WooCommerce PayPal Payments plugin for WordPress is vulnerable to unauthorized order manipulation and information disclosure due to missing authorization checks on…Check if you run itEPSS 0.46%May 23, 2026
- High8.7NukeViet CMS is a multi Content Management System.Check if you run itEPSS 0.61%May 22, 2026
- High7.1RT is an open source, enterprise-grade issue and ticket tracking system.Check if you run itEPSS 0.17%May 22, 2026
- Medium4.3JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks.Check if you run itEPSS 0.18%May 22, 2026
- High8.8The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Python files from model directo…Check if you run itEPSS 0.18%May 22, 2026
- High8.8The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, and runs without sandboxing.Check if you run itEPSS 0.18%May 22, 2026
- Medium6.9Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.53%May 22, 2026
- Medium6.1Devise is an authentication solution for Rails based on Warden.Check if you run itEPSS 0.32%May 22, 2026
- High7.7TypeBot is a chatbot builder tool.Check if you run itEPSS 0.38%May 22, 2026
- High7.6TypeBot is a chatbot builder tool.Check if you run itEPSS 0.41%May 22, 2026
- Critical10.0Typebot is a chatbot builder tool.Check if you run itEPSS 0.45%May 22, 2026
- Medium5.4Missing authorization in the entry status management feature in Devolutions Server allows a non-administrator authenticated user to bypass the administrator-enforced P…Check if you run itEPSS 0.24%May 22, 2026
- Low3.1Unverified password change in Devolutions Server allows an attacker to change a user's password without providing the previous one via a crafted password change request.Check if you run itEPSS 0.21%May 22, 2026
- Low2.6Authorization bypass in the entry duplication feature in Devolutions Server allows an authenticated user with write access to any vault to copy documentation and attac…Check if you run itEPSS 0.21%May 22, 2026
- Low2.4Insufficient logging in the entry export feature in Devolutions Server allows an authenticated user with export permissions to export a sealed entry without triggering…Check if you run itEPSS 0.27%May 22, 2026
- Medium4.3Improper access control in the entry documentation and attachment features in Devolutions Server allows an authenticated user with vault read access to retrieve the do…Check if you run itEPSS 0.25%May 22, 2026
- Medium4.3Missing authorization in the user profile update feature in Devolutions Server allows an authenticated Active Directory user to modify their own profile attributes via…Check if you run itEPSS 0.25%May 22, 2026
- Medium4.3Missing authorization in the vault import feature in Devolutions Server 2026.1.16.0 and earlier allows a low-privileged authenticated user to create new vaults via a c…Check if you run itEPSS 0.25%May 22, 2026
- Low2.7Improper enforcement of the sealed-entry workflow in the entry sensitive-data retrieval feature in Devolutions Server allows an authenticated user with access to a sea…Check if you run itEPSS 0.30%May 22, 2026