Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5OpenAirInterface V2.2.0 AMF crashes when it fails to decode the message.Check if you run itEPSS 0.28%Mar 30, 2026
- High8.2A cross-session information disclosure vulnerability exists in the awesome-llm-apps project in commit e46690f99c3f08be80a9877fab52acacf7ab8251 (2026-01-19).Check if you run itEPSS 0.26%Mar 30, 2026
- Medium6.8OpenSC is an open source smart card tools and middleware.Check if you run itEPSS 0.17%Mar 30, 2026
- Medium6.8OpenSC is an open source smart card tools and middleware.Check if you run itEPSS 0.29%Mar 30, 2026
- Medium6.8OpenSC is an open source smart card tools and middleware.Check if you run itEPSS 0.26%Mar 30, 2026
- Medium6.8OpenSC is an open source smart card tools and middleware.Check if you run itEPSS 0.14%Mar 30, 2026
- Medium6.3A security vulnerability has been detected in osrg GoBGP up to 4.3.0.Check if you run itEPSS 0.30%Mar 30, 2026
- High7.6In KubePlus 4.1.4, the mutating webhook and kubeconfiggenerator components have an SSRF vulnerability when processing the chartURL field of ResourceComposition resources.Check if you run itEPSS 0.28%Mar 30, 2026
- Medium5.3MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module.Check if you run itEPSS 0.45%Mar 30, 2026
- High7.5The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which mCheck if you run itEPSS 0.39%Mar 30, 2026
- Low2.8go-git is an extensible git implementation library written in pure Go.Check if you run itEPSS 0.18%Mar 30, 2026
- Medium5.1Smoothwall Express versions prior to 3.1 Update 13 contain a reflected cross-site scripting vulnerability in the /redirect.cgi endpoint due to improper sanitation of the url parameCheck if you run itEPSS 0.16%Mar 30, 2026
- Medium5.1Smoothwall Express versions prior to 3.1 Update 13 contain a stored cross-site scripting vulnerability in the /cgi-bin/vpnmain.cgi script due to improper sanitation of the VPN_IP pCheck if you run itEPSS 0.14%Mar 30, 2026
- Medium6.0A user with access to the cluster with a limited set of privilege actions can trigger a crash of a mongod process during the limited and unpredictable window when the…Check if you run itEPSS 0.21%Mar 30, 2026
- Medium6.3A weakness has been identified in osrg GoBGP up to 4.3.0.Check if you run itEPSS 0.43%Mar 30, 2026
- High7.4SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the mysqlColumnAsInsert function in file plugins/mysql/lib/column.go.Check if you run itEPSS 0.20%Mar 30, 2026
- Critical9.3A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.33%Mar 30, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.26%Mar 30, 2026
- Critical9.8CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation.Check if you run itEPSS 0.76%Mar 30, 2026
- Critical9.8CrewAI contains a server-side request forgery vulnerability that enables content acquisition from internal and cloud services, facilitated by the RAG search tools not…Check if you run itEPSS 0.51%Mar 30, 2026
- High7.5CrewAI contains a arbitrary local file read vulnerability in the JSON loader tool that reads files without path validation, enabling access to files on the server.Check if you run itEPSS 0.63%Mar 30, 2026
- Critical9.6The CrewAI CodeInterpreter tool falls back to SandboxPython when it cannot reach Docker, which can enable RCE through arbitrary C function calling.Check if you run itEPSS 0.46%Mar 30, 2026
- High7.4SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the columnAsInsert function in file plugins/postgres/lib/column.go.Check if you run itEPSS 0.20%Mar 30, 2026
- Medium6.5A flaw in Node.js URL processing causes an assertion failure in native code when is called with a malformed internationalized domain name (IDN) containing invalid char…Check if you run itEPSS 0.33%Mar 30, 2026
- Medium6.3A security flaw has been discovered in osrg GoBGP up to 4.3.0.Check if you run itEPSS 0.30%Mar 30, 2026
Sort