Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8OpenClaw is a personal AI assistant.EPSS 0.2%Feb 21, 2026
- Medium6.5A denial-of-service vulnerability was identified in Moodle’s TeX formula editor.EPSS 0.6%Feb 21, 2026
- High8.2An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.EPSS 0.3%Dec 15, 2025
- High7.5A flaw was found in the OpenShift Lightspeed Service, which is vulnerable to unauthenticated API request flooding.EPSS 0.5%Mar 31, 2025
- High7.5libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buff…EPSS 2.1%Feb 4, 2024
- High7.5HTTP/2 Rapid Reset Attack VulnerabilityKEVEPSS 100.0%Oct 10, 2023
- Medium5.5A flaw was found in GLib.EPSS 0.4%Sep 14, 2023
- High7.5A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499.EPSS 0.8%Sep 14, 2023
- Medium5.5A flaw was found in GLib.EPSS 0.4%Sep 14, 2023
- High7.5A flaw was found in GLib.EPSS 0.8%Sep 14, 2023
- High7.5Microsoft .NET Core and Visual Studio Denial-of-Service VulnerabilityKEVEPSS 14.0%Aug 8, 2023
- High7.5Envoy is a cloud-native high-performance edge/middle/service proxy.EPSS 1.7%Jul 13, 2023
- Medium5.7A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack.EPSS 0.6%Jun 30, 2023
- Medium5.3Avast Anti Rootkit kernel driver user controlled lengthKEVEPSS 0.2%Dec 5, 2022
- Medium5.5systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace.EPSS 0.3%Nov 23, 2022
- Medium5.5A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, c…EPSS 0.4%Aug 23, 2022
- High7.5libcurl provides the option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server…EPSS 2.9%Jun 2, 2022
- Medium6.5There's a flaw in urllib's AbstractBasicAuthHandler class.EPSS 4.8%Mar 10, 2022
- High7.5A flaw was found in python.EPSS 13.2%Mar 4, 2022
- Critical10.0Apache Log4j2 Remote Code Execution VulnerabilityKEVEPSS 100.0%Dec 6, 2021
- High8.6Cisco IOS XR Software DVMRP Memory Exhaustion VulnerabilityKEVEPSS 3.3%Aug 29, 2020
- High8.6Cisco IOS XR Software DVMRP Memory Exhaustion VulnerabilityKEVEPSS 3.7%Aug 29, 2020
- High7.5Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource consumption) via a ZIP bomb.EPSS 5.6%Feb 4, 2020
- Medium6.5Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial o…EPSS 6.6%Jan 30, 2020
- Medium5.3The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter.EPSS 2.8%Jun 7, 2018