Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5GitLab has remediated an issue in GitLab EE affecting all versions from 18.5 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an una…Check if you run itEPSS 0.48%Mar 25, 2026
- High7.5If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU.Check if you run itEPSS 1.72%Mar 25, 2026
- High8.8Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642.Check if you run itEPSS 0.70%Mar 25, 2026
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that under certain conditions…Check if you run itEPSS 0.27%Mar 25, 2026
- Medium6.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.7 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an…Check if you run itEPSS 0.43%Mar 25, 2026
- Medium6.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.10 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an…Check if you run itEPSS 0.43%Mar 25, 2026
- Low2.1A security vulnerability has been detected in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.38%Mar 24, 2026
- Low2.1A weakness has been identified in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.32%Mar 24, 2026
- Low2.1A security flaw has been discovered in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.26%Mar 24, 2026
- Low1.9An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunnel user and GatewayPorts.Check if you run itEPSS 0.17%Mar 24, 2026
- High8.7Injection vulnerabilities due to validation/sanitisation of user-supplied input in ActiveMatrix BusinessWorks and Enterprise Administrator allows information disclosur…Check if you run itEPSS 0.32%Mar 24, 2026
- Medium6.5NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.Check if you run itEPSS 0.25%Mar 24, 2026
- Critical9.8NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution.Check if you run itEPSS 0.66%Mar 24, 2026
- High7.5NVIDIA Triton Inference Server contains a vulnerability in the HTTP endpoint where an attacker may cause a denial of service by providing a large compressed payload.Check if you run itEPSS 0.42%Mar 24, 2026
- Critical9.8NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution.Check if you run itEPSS 0.68%Mar 24, 2026
- High7.8NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file.Check if you run itEPSS 0.22%Mar 24, 2026
- High7.8NVIDIA Megatron-LM contains a vulnerability in inferencing where an Attacker may cause an RCE by convincing a user to load a maliciously crafted input.Check if you run itEPSS 0.22%Mar 24, 2026
- High7.8NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file.Check if you run itEPSS 0.22%Mar 24, 2026
- High7.8NVIDIA Model Optimizer for Windows and Linux contains a vulnerability in the ONNX quantization feature, where a user could cause unsafe deserialization by providing a…Check if you run itEPSS 0.22%Mar 24, 2026
- Medium6.3HCL Traveler is susceptible to a weak default HTTP header validation vulnerability, which could allow an attacker to bypass additional authentication checks.Check if you run itEPSS 0.16%Mar 24, 2026
- High7.5NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause internal state corruption.Check if you run itEPSS 0.34%Mar 24, 2026
- High7.8NVIDIA Megatron-LM contains a vulnerability in the hybrid conversion script where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file.Check if you run itEPSS 0.22%Mar 24, 2026
- High7.8NVIDIA Megatron LM contains a vulnerability in quantization configuration loading, which could allow remote code execution.Check if you run itEPSS 0.34%Mar 24, 2026
- Critical9.0NVIDIA APEX for Linux contains a vulnerability where an unauthorized attacker could cause a deserialization of untrusted data.Check if you run itEPSS 0.57%Mar 24, 2026
- Medium5.9NVIDIA B300 MCU contains a vulnerability in the CX8 MCU that could allow a malicious actor to modify unsupported registries, causing a bad state.Check if you run itEPSS 0.32%Mar 24, 2026
Sort