Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.0LibreChat version 0.8.1-rc2 uses the same JWT secret for the user session mechanism and RAG API which compromises the service-level authentication of the RAG API.Check if you run itEPSS 0.36%Mar 18, 2026
- High7.1Kube-router is a turnkey solution for Kubernetes networking.Check if you run itEPSS 0.46%Mar 18, 2026
- Critical9.8Vulnerability in the Oracle Edge Cloud Infrastructure Designer and Visualisation Toolkit product of Oracle Open Source Projects (component: Desktop).Check if you run itEPSS 0.46%Mar 17, 2026
- High8.1An issue was discovered in SpeedExam Online Examination System (SaaS) after v.FEV2026.Check if you run itEPSS 0.45%Mar 17, 2026
- Medium5.3An Incorrect Access Control vulnerability exists in INDEX-EDUCATION PRONOTE prior to 2025.2.8.Check if you run itEPSS 0.25%Mar 16, 2026
- Medium5.5A vulnerability was found in Tiandy Easy7 Integrated Management Platform 7.17.0.Check if you run itEPSS 0.49%Mar 16, 2026
- Medium5.5A vulnerability has been found in Technologies Integrated Management Platform 7.17.0.Check if you run itEPSS 0.53%Mar 16, 2026
- Low1.1A vulnerability was detected in myAEDES App up to 1.18.4 on Android.Check if you run itEPSS 0.13%Mar 16, 2026
- Medium5.5A weakness has been identified in glowxq glowxq-oj up to 6f7c723090472057252040fd2bbbdaa1b5ed2393.Check if you run itEPSS 1.26%Mar 16, 2026
- Medium5.5A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-…Check if you run itEPSS 3.12%Mar 16, 2026
- Medium5.5A security vulnerability has been detected in D-Link DIR-823G 1.0.2B05.Check if you run itEPSS 1.90%Mar 16, 2026
- Medium5.5A flaw has been found in JawherKl node-api-postgres up to 2.5.Check if you run itEPSS 0.49%Mar 16, 2026
- Medium5.5A vulnerability was identified in D-Link DIR-816 1.10CNB05.Check if you run itEPSS 3.12%Mar 16, 2026
- Medium6.9Insecure Direct Object Reference (IDOR) vulnerability in Campus Educativa specifically at the endpoint '/archivos/usuarios/[ID]/[username]/thumb_AAxAA.jpg' (translated…Check if you run itEPSS 0.43%Mar 16, 2026
- High8.7Insecure Direct Object Reference (IDOR) vulnerability in Campus Educativa specifically at the endpoint '/administracion/admin_usuarios.cgi?filtro_estado=T&wAccion=list…Check if you run itEPSS 0.43%Mar 16, 2026
- High7.1The CTFer.io Monitoring component is in charge of the collection, process and storage of various signals (i.e.Check if you run itEPSS 0.42%Mar 16, 2026
- High7.1IBM CICS Transaction Gateway for Multiplatforms 9.3 and 10.1 could allow a user to transfer or view files due to improper access controls.Check if you run itEPSS 0.21%Mar 16, 2026
- Medium6.7A flaw was found in systemd.Check if you run itEPSS 0.15%Mar 13, 2026
- High8.2NEXULEAN is a cybersecurity portfolio & service platform for an Ethical Hacker, AI Enthusiast, and Penetration Tester.Check if you run itEPSS 0.45%Mar 12, 2026
- High8.8A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.Check if you run itEPSS 1.15%Mar 12, 2026
- High8.8A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.Check if you run itEPSS 1.15%Mar 12, 2026
- Medium5.3Insufficient policy enforcement in DevTools in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.Check if you run itEPSS 0.25%Mar 11, 2026
- Medium5.3Insufficient policy enforcement in PDF in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted PDF file.Check if you run itEPSS 0.24%Mar 11, 2026
- Medium4.3Insufficient policy enforcement in Clipboard in Google Chrome prior to 146.0.7680.71 allowed a remote attacker who had compromised the renderer process to leak cross-o…Check if you run itEPSS 0.26%Mar 11, 2026
- Medium6.5Insufficient policy enforcement in ChromeDriver in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass same origin policy via a crafted HTML page.Check if you run itEPSS 0.30%Mar 11, 2026