Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5An issue in GoBGP gobgpd v.4.2.0 allows a remote attacker to cause a denial of service via the NEXT_HOP path attributeCheck if you run itEPSS 0.39%Mar 16, 2026
- Medium6.5In Forgejo through 13.0.3, the attachment component allows a denial of service by uploading a multi-gigabyte file attachment (e.g., to be associated with an issue or a release).Check if you run itEPSS 0.53%Mar 16, 2026
- High8.8The script in Use It Flow administration website before 10.0.0 is vulnerable to Remote Code Execution.Check if you run itEPSS 0.71%Mar 16, 2026
- Medium4.8A vulnerability was determined in hypermodel-labs mcp-server-auto-commit 1.0.0.Check if you run itEPSS 0.81%Mar 15, 2026
- Medium5.3A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DCheck this weekEPSS 21.76%Mar 15, 2026
- Medium5.3A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-3Check if you run itEPSS 4.83%Mar 15, 2026
- Medium5.3A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-3Check if you run itEPSS 4.52%Mar 15, 2026
- Medium6.9A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343Check if you run itEPSS 5.59%Mar 15, 2026
- Medium6.9A security vulnerability has been detected in D-Link DIR-823G 1.0.2B05.Check if you run itEPSS 0.91%Mar 15, 2026
- Medium5.3A vulnerability has been found in AvinashBole quip-mcp-server 1.0.0.Check if you run itEPSS 1.63%Mar 15, 2026
- Medium6.9A flaw has been found in JawherKl node-api-postgres up to 2.5.Check if you run itEPSS 0.39%Mar 15, 2026
- Medium6.9A vulnerability was detected in JawherKl node-api-postgres up to 2.5.Check if you run itEPSS 0.29%Mar 15, 2026
- Medium5.1A weakness has been identified in phpipam up to 1.7.4.Check if you run itEPSS 0.29%Mar 15, 2026
- High8.7A security flaw has been discovered in D-Link DIR-619L 2.06B01.Check if you run itEPSS 0.52%Mar 15, 2026
- Medium6.9A vulnerability was identified in Tiandy Easy7 Integrated Management Platform 7.17.0.Check if you run itEPSS 0.57%Mar 15, 2026
- Medium5.1A vulnerability was determined in UEditor up to 1.4.3.2.Check if you run itEPSS 0.28%Mar 15, 2026
- High8.8RealtyScript 4.0.2 Multiple Time-based Blind SQL InjectionCheck if you run itEPSS 0.47%Mar 15, 2026
- High8.7Serviio PRO 1.8 contains an improper access control vulnerability in the Configuration REST API that allows unauthenticated attackers to change the mediabrowser login password.Check if you run itEPSS 0.45%Mar 15, 2026
- Medium5.1Serviio PRO 1.8 DLNA Media Streaming Server contains a DOM-based cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting malCheck if you run itEPSS 0.28%Mar 15, 2026
- High8.5Serviio PRO 1.8 contains an unquoted search path vulnerability in the Windows service that allows local users to execute arbitrary code with elevated privileges by placing maliciouCheck if you run itEPSS 0.16%Mar 15, 2026
- High8.7Serviio PRO 1.8 contains an information disclosure vulnerability due to improper access control enforcement in the Configuration REST API that allows unauthenticated attackers to aCheck if you run itEPSS 0.75%Mar 15, 2026
- Medium5.1Wowza Streaming Engine 4.5.0 contains multiple reflected cross-site scripting vulnerabilities in the enginemanager interface where input passed through various parameters is not prCheck if you run itEPSS 0.28%Mar 15, 2026
- Medium6.9Wowza Streaming Engine 4.5.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by crafting malicious web pages.Check if you run itEPSS 0.18%Mar 15, 2026
- High8.7Wowza Streaming Engine 4.5.0 contains a privilege escalation vulnerability that allows authenticated read-only users to elevate privileges to administrator by manipulating POST parCheck if you run itEPSS 0.24%Mar 15, 2026
- High8.5Wowza Streaming Engine 4.5.0 contains a local privilege escalation vulnerability that allows authenticated users to escalate privileges by replacing executable files due to impropeCheck if you run itEPSS 0.24%Mar 15, 2026
Sort