Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8An issue was discovered in Biztalk360 before 11.5.Check if you run itEPSS 0.46%Apr 3, 2026
- Low2.1A vulnerability was identified in Casdoor 2.356.0.Check if you run itEPSS 0.43%Apr 3, 2026
- Medium5.3In Tornado before 6.5.5, cookie attribute injection could occur because the domain, path, and samesite arguments to .RequestHandler.set_cookie were not checked for cra…Check if you run itEPSS 0.29%Apr 3, 2026
- Critical9.8Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.90%Apr 3, 2026
- High8.8Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.75%Apr 3, 2026
- Critical9.2HiOS Switch Platform versions 09.1.00 through 09.4.04 and 10.0.00 through 10.3.00 contain a denial-of-service vulnerability in the web interface that allows remote att…Check if you run itEPSS 0.51%Apr 2, 2026
- Low2.7Ella Core is a 5G core designed for private networks.Check if you run itEPSS 0.31%Apr 2, 2026
- Critical9.3Hirschmann HiEOS devices versions prior to 01.1.00 contain an authentication bypass vulnerability in the HTTP(S) management module that allows unauthenticated remote a…Check if you run itEPSS 0.46%Apr 2, 2026
- Medium5.5A vulnerability was identified in appsmithorg appsmith up to 1.97.Check if you run itEPSS 0.51%Apr 2, 2026
- Low2.0A vulnerability was determined in Dataease SQLbot up to 1.6.0.Check if you run itEPSS 0.38%Apr 2, 2026
- High7.6The Go MCP SDK used Go's standard encoding/json.Check if you run itEPSS 0.66%Apr 2, 2026
- Medium5.5A security flaw has been discovered in Newgen OmniDocs up to 12.0.00.Check if you run itEPSS 0.51%Apr 2, 2026
- Medium6.5Rack is a modular Ruby web server interface.Check if you run itEPSS 0.28%Apr 2, 2026
- High7.5Rack is a modular Ruby web server interface.Check if you run itEPSS 0.66%Apr 2, 2026
- Medium5.3ewe is a Gleam web server.Check if you run itEPSS 0.41%Apr 2, 2026
- Medium5.3SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speec…Check if you run itEPSS 0.43%Apr 2, 2026
- High7.1A denial-of-service vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP request path parsing logic.Check if you run itEPSS 0.43%Apr 2, 2026
- High8.7An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v2.6 was identified, due to inconsistent parsing…Check if you run itEPSS 0.48%Apr 2, 2026
- High7.1A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP parsing loop when appending segmented request bodies without cont…Check if you run itEPSS 0.36%Apr 2, 2026
- Low2.1A vulnerability has been found in Trendnet TEW-657BRM 1.00.1.Check if you run itEPSS 5.73%Apr 2, 2026
- Low2.1A flaw has been found in Trendnet TEW-657BRM 1.00.1.Check if you run itEPSS 5.73%Apr 2, 2026
- Low2.1A vulnerability was detected in Trendnet TEW-657BRM 1.00.1.Check if you run itEPSS 5.73%Apr 2, 2026
- Low2.1A security vulnerability has been detected in Trendnet TEW-657BRM 1.00.1.Check if you run itEPSS 5.73%Apr 2, 2026
- Medium6.5Rack is a modular Ruby web server interface.Check if you run itEPSS 0.24%Apr 2, 2026
- High7.5Rack is a modular Ruby web server interface.Check if you run itEPSS 0.40%Apr 2, 2026