Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.4FastMCP is the standard framework for building MCP applications.Check if you run itEPSS 0.42%Mar 16, 2026
- High8.2Authlib is a Python library which builds OAuth and OpenID Connect servers.Check if you run itEPSS 0.26%Mar 16, 2026
- Medium6.0When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model a C stack overflow occurs.Check if you run itEPSS 0.77%Mar 16, 2026
- Medium6.0The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete.Check if you run itEPSS 0.54%Mar 16, 2026
- Critical9.1Authlib is a Python library which builds OAuth and OpenID Connect servers.Check if you run itEPSS 0.61%Mar 16, 2026
- Medium6.8Improper Protection of Alternate Path exists in the no-access and workdir feature of the AWS API MCP Server versions >= 0.2.14 and < 1.3.9 on all platforms may allow t…Check if you run itEPSS 0.15%Mar 16, 2026
- High8.9A vulnerability was identified in Tenda AC8 16.03.50.11.Check if you run itEPSS 1.43%Mar 16, 2026
- Low1.1A vulnerability was determined in CityData CityChat up to 0.12.6 on Android.Check if you run itEPSS 0.11%Mar 16, 2026
- High7.5An issue in GoBGP gobgpd v.4.2.0 allows a remote attacker to cause a denial of service via the NEXT_HOP path attributeCheck if you run itEPSS 0.39%Mar 16, 2026
- Medium5.4An authenticated arbitrary file upload vulnerability in the Courses/Work Assignments module of gunet Open eClass v3.11, and fixed in v3.13, allows attackers to execute…Check if you run itEPSS 0.29%Mar 16, 2026
- High7.5LibreChat RAG API, version 0.7.0, contains a log-injection vulnerability that allows attackers to forge log entries.Check if you run itEPSS 0.32%Mar 16, 2026
- Low1.1A vulnerability was found in Albert Sağlık Hizmetleri ve Ticaret Albert Health up to 1.7.3 on Android.Check if you run itEPSS 0.11%Mar 16, 2026
- Medium5.4Missing Authorization vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP…Check if you run itEPSS 0.20%Mar 16, 2026
- Medium5.3Missing Authorization vulnerability in Webnus Inc.Check if you run itEPSS 0.76%Mar 16, 2026
- High8.8A local, non-privileged attacker can abuse a vulnerable IOCTL interface exposed by the OpenEDR 2.5.1.0 kernel driver to modify the DLL injection path used by the product.Check if you run itEPSS 0.21%Mar 16, 2026
- High7.8A local attacker can bypass OpenEDR's 2.5.1.0 self-defense mechanism by renaming a malicious executable to match a trusted process name (e.g., csrss.exe, edrsvc.exe, edrcon.exe).Check if you run itEPSS 0.18%Mar 16, 2026
- Critical9.8Boolean-Based SQL Injection is a type of blind SQL injection where an attacker manipulates SQL queries by injecting Boolean conditions (TRUE or FALSE) into application…Check if you run itEPSS 0.32%Mar 16, 2026
- Medium6.1Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" field on object forms.Check if you run itEPSS 0.21%Mar 16, 2026
- Low1.1A weakness has been identified in La Nacion App 10.2.25 on Android.Check if you run itEPSS 0.12%Mar 16, 2026
- Low1.1A security flaw has been discovered in BabyChakra Pregnancy & Parenting App up to 5.4.3.0 on Android.Check if you run itEPSS 0.11%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to canonicalize IPv4-mapped IPv6 addresses before reserved IP validation which allows…Check if you run itEPSS 0.19%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly enforce read permissions in search API endpoints which allows guest users…Check if you run itEPSS 0.19%Mar 16, 2026
- Low3.5Mattermost versions 10.11.x <= 10.11.10 fail to validate user's authentication method when processing account auth type switch which allows an authenticated attacker t…Check if you run itEPSS 0.17%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to use consistent error responses when handling the /mute command which allows an auth…Check if you run itEPSS 0.21%Mar 16, 2026
- Medium5.3HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature.Check if you run itEPSS 0.15%Mar 16, 2026
Sort