Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Kubewarden is a policy engine for Kubernetes.Check if you run itEPSS 0.27%May 12, 2026
- Medium6.1Fides is an open-source privacy engineering platform.Check if you run itEPSS 0.55%May 12, 2026
- Critical9.3DevGuard provides vulnerability management for the full software supply chain.Check if you run itEPSS 0.43%May 12, 2026
- Medium5.3linux-entra-sso is a browser plugin for Linux to SSO on Microsoft Entra ID.Check if you run itEPSS 0.31%May 12, 2026
- Medium6.5requests-hardened is a library that overrides the default behaviors of the requests library, and adds new security features.Check if you run itEPSS 0.39%May 12, 2026
- High7.7Xibo is an open source digital signage platform with a web content management system and Windows display player software.Check if you run itEPSS 0.42%May 12, 2026
- Medium5.3The mem0 1.0.0 server lacks authentication and authorization controls for its memory creation API endpoint (POST /memories).Check if you run itEPSS 0.48%May 12, 2026
- Medium6.5The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint (DELETE /memories/{memory_id}).Check if you run itEPSS 0.55%May 12, 2026
- Medium6.5The mem0 1.0.0 server lacks authentication and authorization controls for its memory reset and table re-creation functionality accessible via the DELETE /memories endpoint.Check if you run itEPSS 0.53%May 12, 2026
- Critical9.1The mem0 v1.0.0 server lacks authentication and authorization controls for its memory reset functionality accessible via the DELETE /memories endpoint.Check if you run itEPSS 0.74%May 12, 2026
- Medium6.5The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint (DELETE /memories).Check if you run itEPSS 0.55%May 12, 2026
- High7.5The mem0 1.0.0 server lacks authentication and authorization controls for its memory management API endpoints.Check if you run itEPSS 0.54%May 12, 2026
- Critical9.8Horovod thru 0.28.1 contains an insecure deserialization vulnerability (CWE-502) in its KVStore HTTP server component.Check if you run itEPSS 1.03%May 12, 2026
- Critical9.8Cognee thru v0.4.0 contains a critical remote code execution vulnerability in its notebook cell execution API endpoint.Check if you run itEPSS 0.93%May 12, 2026
- Critical9.1Insufficient ownership check in allows an authenticated client area user to submit requests using another user’s without any ownership validation leading to unauthoriz…Check if you run itEPSS 0.45%May 12, 2026
- Critical9.8A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.2 through 5.0.5, FortiSand…Check if you run itEPSS 0.50%May 12, 2026
- Medium6.5An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.0.0 through 6.0.2, FortiDeceptor 5.3.0…Check if you run itEPSS 0.33%May 12, 2026
- High8.8An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiNDR 7.6.0 through 7.6.2, FortiNDR 7.4.0 through…Check if you run itEPSS 0.26%May 12, 2026
- Medium5.3A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions,…Check if you run itEPSS 0.42%May 12, 2026
- High7.2An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3…Check if you run itEPSS 0.36%May 12, 2026
- Medium6.7An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability [CWE-78] vulnerability in Fortinet FortiAP 7.6.0 through 7.…Check if you run itEPSS 0.56%May 12, 2026
- Medium4.3Missing authorization in the PAM module in Devolutions Server allows an authenticated user with a PAM license but no additional permissions to obtain OTP secret keys a…Check if you run itEPSS 0.27%May 12, 2026
- Critical9.1The nexent v1.7.5.2 backend service contains an unauthorized arbitrary storage file deletion vulnerability in its file management API.Check if you run itEPSS 0.71%May 12, 2026
- Critical9.1The nexent v1.7.5.2 backend service contains an unauthorized arbitrary file deletion vulnerability in its ElasticSearch service interface.Check if you run itEPSS 0.73%May 12, 2026
- High7.1Server-Side Request Forgery vulnerability allows Privilege Escalation via API Checker extension.Check if you run itEPSS 0.42%May 12, 2026