Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.7cpp-httplib is a C++ header-only HTTP/HTTPS library.Check if you run itEPSS 0.37%Oct 14, 2026
- High7.5cpp-httplib is a C++ header-only HTTP/HTTPS library.Check if you run itEPSS 0.36%Oct 14, 2026
- Critical9.2Dgraph is an open source distributed GraphQL database.Check if you run itEPSS 0.49%Oct 14, 2026
- Medium5.6Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents.Check if you run itEPSS 0.23%Oct 14, 2026
- High8.7HTTP Request SmugglingCheck if you run itEPSS 0.27%Oct 14, 2026
- High8.6Incorrect AuthorizationCheck if you run itEPSS 0.32%Oct 14, 2026
- Medium5.3Shopizer through 3.2.5 contains an authorization bypass vulnerability that allows authenticated customers to post reviews as other customers by supplying a customerId field.Check if you run itEPSS 0.22%Oct 14, 2026
- Critical9.2Databasus 3.7.0 through 3.61.0 Account Takeover via Password Reset Brute-ForceCheck if you run itEPSS 0.50%Oct 14, 2026
- High8.8Mongoose is an embedded web server and network library.Check if you run itEPSS 0.24%Oct 14, 2026
- High8.1ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endpoint, which accepts a user-controlled numeric ID in the request bod…Check if you run itEPSS 0.27%Oct 14, 2026
- Medium4.9Redash is a package for data visualization and sharing.Check if you run itEPSS 0.41%Oct 14, 2026
- High8.7The NetX Secure DTLS server sends a HelloVerifyRequest carrying a freshly generated cookie, but never checks the cookie a client returns.Check if you run itEPSS 0.32%Oct 14, 2026
- Critical9.3When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits in the outgoing packet.Check if you run itEPSS 0.28%Oct 14, 2026
- High7.1Flyto2 Core is an execution kernel for automation and AI-agent workflows.Check if you run itEPSS 0.24%Oct 14, 2026
- High7.5FOG is a free open-source cloning/imaging/rescue suite/inventory management system.Check if you run itEPSS 0.51%Oct 14, 2026
- High7.5The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients.Check if you run itEPSS 0.70%Oct 14, 2026
- High7.5The Model Context Protocol Java SDK is the official Java SDK for Model Context Protocol servers and clients.Check if you run itEPSS 0.61%Oct 14, 2026
- Low3.7An authentication rate-limit bypass in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to make repeated password guesses through Gra…Check if you run itEPSS 0.29%Oct 14, 2026
- Critical9.9KEDA is a Kubernetes-based Event Driven Autoscaling component.Check if you run itEPSS 0.64%Oct 14, 2026
- Medium5.9The receive path of the NXP KW41Z IEEE 802.15.4 driver, kw41z_rx() in drivers/ieee802154/ieee802154_kw41z.c, computed the payload size as pkt_len = len - KW41Z_FCS_LEN…Check if you run itEPSS 0.23%Oct 14, 2026
- Medium5.3RabbitMQ is a messaging and streaming broker.Check if you run itEPSS 0.40%Oct 14, 2026
- High7.5The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP).Check if you run itEPSS 0.46%Oct 14, 2026
- Medium6.3Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenti…Check if you run itEPSS 0.36%Oct 14, 2026
- High8.2An Improper Resource Locking vulnerability in the UTM processing of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause…Check if you run itEPSS 0.31%Oct 14, 2026
- High8.5An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control of the device.Check if you run itEPSS 0.66%Oct 14, 2026