Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.9Sonicverse is a Self-hosted Docker Compose stack for live radio streaming.Check if you run itEPSS 0.24%Apr 9, 2026
- High8.1Apollo MCP Server is a Model Context Protocol server that exposes GraphQL operations as MCP tools.Check if you run itEPSS 0.19%Apr 9, 2026
- Medium6.5CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled and FFM is used in Apache Tomcat.Check if you run itEPSS 0.46%Apr 9, 2026
- High7.5Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clustering component of Apache Tomcat exposed the Kubernetes bearer token.Check if you run itEPSS 0.46%Apr 9, 2026
- Medium5.3LangChain is a framework for building agents and LLM-powered applications.Check if you run itEPSS 0.27%Apr 9, 2026
- High7.5Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve component of Apache Tomcat.Check if you run itEPSS 0.47%Apr 9, 2026
- Critical9.3Missing hash/digest size and OID checks allow digests smaller than allowed when verifying ECDSA certificates, or smaller than is appropriate for the relevant key type, to be acceptCheck if you run itEPSS 0.58%Apr 9, 2026
- Medium6.9A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1.Check if you run itEPSS 2.56%Apr 9, 2026
- Low3.5Beszel is a server monitoring platform.Check if you run itEPSS 0.23%Apr 9, 2026
- Medium5.3Improper Input Validation vulnerability in Apache Tomcat due to an incomplete fix of CVE-2025-66614.Check if you run itEPSS 0.31%Apr 9, 2026
- High7.5Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration.Check if you run itEPSS 8.85%Apr 9, 2026
- Critical9.1CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native.Check if you run itEPSS 0.73%Apr 9, 2026
- High7.5Configured cipher preference order not preserved vulnerability in Apache Tomcat.Check if you run itEPSS 0.26%Apr 9, 2026
- Critical9.8An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stun-pass parameter to /cgi-bin/cstecgi.cgi.Check if you run itEPSS 0.60%Apr 9, 2026
- Medium6.1Occasional URL redirection to untrusted Site ('Open Redirect') vulnerability in Apache Tomcat via the LoadBalancerDrainingValve.Check if you run itEPSS 0.58%Apr 9, 2026
- High7.5Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat via invalid chunk extension.Check if you run itEPSS 0.71%Apr 9, 2026
- High7.1flatpak-builder is a tool to build flatpaks from source.Check if you run itEPSS 0.30%Apr 9, 2026
- High7.8HDF5 is software for managing data.Check if you run itEPSS 0.20%Apr 9, 2026
- Medium6.9A vulnerability has been found in FoundationAgents MetaGPT up to 0.8.1.Check if you run itEPSS 2.66%Apr 9, 2026
- High8.7OpenPLC_V3 REST API endpoint checks for JWT presence but never verifies the caller's role.Check if you run itEPSS 0.24%Apr 9, 2026
- Critical9.2OpenPLC_V3 is vulnerable to a Plaintext Storage of a Password vulnerability that could allow an attacker to retrieve credentials and access sensitive information.Check if you run itEPSS 0.30%Apr 9, 2026
- Medium6.1Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.22%Apr 9, 2026
- Critical9.2OpenPLC_V3 is vulnerable to an Initialization of a Resource with an Insecure Default vulnerability which could allow an attacker to gain access to the system by bypassing authenticCheck if you run itEPSS 0.46%Apr 9, 2026
- Medium6.1Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.22%Apr 9, 2026
- Low2.3Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.30%Apr 9, 2026
Sort