Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5A denial-of-service issue was addressed with improved input validation.Check if you run itEPSS 0.71%Mar 25, 2026
- Medium5.5A stack overflow was addressed with improved input validation.Check if you run itEPSS 0.17%Mar 25, 2026
- High8.4A validation issue existed in the entitlement verification.Check if you run itEPSS 0.19%Mar 25, 2026
- Medium5.3This issue was addressed with improved input validation.Check if you run itEPSS 0.19%Mar 25, 2026
- High8.7Injection vulnerabilities due to validation/sanitisation of user-supplied input in ActiveMatrix BusinessWorks and Enterprise Administrator allows information disclosur…Check if you run itEPSS 0.38%Mar 24, 2026
- Medium6.9NiceGUI is a Python-based UI framework.Check if you run itEPSS 0.69%Mar 24, 2026
- High8.8An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access to an account if the account owner is socially engineered into clickin…Check if you run itEPSS 0.36%Mar 24, 2026
- Low2.9Astro is a web framework.Check if you run itEPSS 0.36%Mar 24, 2026
- Critical9.8CWE-20 vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-11.Check if you run itEPSS 0.50%Mar 24, 2026
- High7.5Freeciv21 is a free open source, turn-based, empire-building strategy game.Check if you run itEPSS 1.22%Mar 24, 2026
- High7.1A Denial-of-Service (DoS) vulnerability in the httpd component of TP-Link's TD-W8961N v4.0 due to improper input sanitization, allows crafted requests to trigger a pro…Check if you run itEPSS 0.29%Mar 23, 2026
- Low1.9A vulnerability was identified in PyTorch 2.10.0.Check if you run itEPSS 0.40%Mar 22, 2026
- Medium5.3The Appmax plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.52%Mar 21, 2026
- Medium5.3The REST API TO MiniProgram plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.2.Check if you run itEPSS 0.44%Mar 21, 2026
- High8.7Socket.IO is an open source, real-time, bidirectional, event-based, communication framework.Check if you run itEPSS 0.65%Mar 20, 2026
- Medium5.4Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 cou…Check if you run itEPSS 0.33%Mar 20, 2026
- High7.1The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers.Check if you run itEPSS 0.41%Mar 20, 2026
- Medium4.3Zimbra Collaboration (ZCS) 10.0 and 10.1 contains an LDAP injection vulnerability in the Mailbox SOAP service within a FolderAction operation.Check if you run itEPSS 0.40%Mar 20, 2026
- High8.2Discourse is an open-source discussion platform.Check if you run itEPSS 0.41%Mar 20, 2026
- High8.8Insufficient validation of untrusted input in Navigation in Google Chrome prior to 146.0.7680.153 allowed a remote attacker who had compromised the renderer process to…Check if you run itEPSS 0.34%Mar 20, 2026
- Low1.2Missing required cryptographic step in the TLS 1.3 client HelloRetryRequest handshake logic in wolfSSL could lead to a compromise in the confidentiality of TLS-protect…Check if you run itEPSS 0.37%Mar 19, 2026
- High8.6SQLBot is an intelligent data query system based on a large language model and RAG.Check if you run itEPSS 0.80%Mar 19, 2026
- Critical9.8ormar is a async mini ORM for Python.Check if you run itEPSS 1.17%Mar 19, 2026
- High8.8A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx.Check if you run itEPSS 0.63%Mar 19, 2026
- Low2.3openapi-to-java-records-mustache-templates allows users to generate Java Records from OpenAPI specifications.Check if you run itEPSS 0.55%Mar 18, 2026