Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v2.6 and C210 v3 was identified, due to inconsistent parsingCheck if you run itEPSS 0.47%Apr 2, 2026
- High7.1A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within the asynchronous parsing of local video stream content due to insufficient alignment anCheck if you run itEPSS 0.24%Apr 2, 2026
- High7.1A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP parsing loop when appending segmented request bodies without continuous write‑Check if you run itEPSS 0.24%Apr 2, 2026
- High7.1A heap-based buffer overflow vulnerability was identified in multiple TP-Link Tapo cameras in the HTTP POST body parsing logic due to missing validation of remaining buffer capacitCheck if you run itEPSS 0.45%Apr 2, 2026
- Medium5.0SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice modelCheck if you run itEPSS 0.22%Apr 2, 2026
- High8.8SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice modelCheck if you run itEPSS 0.58%Apr 2, 2026
- Medium6.9A vulnerability was determined in projectworlds Car Rental Project 1.0.Check if you run itEPSS 0.34%Apr 2, 2026
- Medium5.3SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice modelCheck if you run itEPSS 0.47%Apr 2, 2026
- High8.1SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice modelCheck if you run itEPSS 0.43%Apr 2, 2026
- Medium6.5Rack is a modular Ruby web server interface.Check if you run itEPSS 0.24%Apr 2, 2026
- Medium6.5Rack is a modular Ruby web server interface.Check if you run itEPSS 0.20%Apr 2, 2026
- High8.1OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certaiCheck if you run itEPSS 0.22%Apr 2, 2026
- High7.5Rack is a modular Ruby web server interface.Check if you run itEPSS 0.49%Apr 2, 2026
- Medium6.5Rack is a modular Ruby web server interface.Check if you run itEPSS 0.19%Apr 2, 2026
- Medium6.7Local privilege escalation due to insecure folder permissions.Check if you run itEPSS 0.09%Apr 2, 2026
- Medium6.7Local privilege escalation due to DLL hijacking vulnerability.Check if you run itEPSS 0.10%Apr 2, 2026
- Medium6.7Local privilege escalation due to DLL hijacking vulnerability.Check if you run itEPSS 0.10%Apr 2, 2026
- Medium6.3A vulnerability has been found in Free5GC 4.2.0.Check if you run itEPSS 0.43%Apr 2, 2026
- Low2.5OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.Check if you run itEPSS 0.13%Apr 2, 2026
- Medium6.5OpenSSH before 10.3 can use unintended ECDSA algorithms.Check if you run itEPSS 0.24%Apr 2, 2026
- High7.5Rack is a modular Ruby web server interface.Check if you run itEPSS 0.24%Apr 2, 2026
- High7.5Rack is a modular Ruby web server interface.Check if you run itEPSS 0.38%Apr 2, 2026
- High7.5Rack is a modular Ruby web server interface.Check if you run itEPSS 0.40%Apr 2, 2026
- Medium5.3A vulnerability has been found in Trendnet TEW-657BRM 1.00.1.Check if you run itEPSS 5.34%Apr 2, 2026
- Medium5.3Rack is a modular Ruby web server interface.Check if you run itEPSS 0.20%Apr 2, 2026
Sort