Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Tautulli is a Python based monitoring and tracking tool for Plex Media Server.Check if you run itEPSS 0.38%Mar 30, 2026
- Medium5.9A flaw in V8's string hashing mechanism causes integer-like strings to be hashed to their numeric value, making hash collisions trivially predictable.Check if you run itEPSS 0.27%Mar 30, 2026
- High7.5Node.js: Node.js: Denial of Service due to crafted HTTP headerCheck this weekEPSS 25.04%Mar 30, 2026
- High7.7Invoice Ninja v5.12.46 and v5.12.48 is vulnerable to Server-Side Request Forgery (SSRF) in CheckDatabaseRequest.php.Check if you run itEPSS 0.37%Mar 30, 2026
- Low2.1A flaw has been found in SourceCodester RSS Feed Parser 1.0.Check if you run itEPSS 0.35%Mar 30, 2026
- High7.1Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.59%Mar 30, 2026
- Critical9.8CrewAI contains a server-side request forgery vulnerability that enables content acquisition from internal and cloud services, facilitated by the RAG search tools not…Check if you run itEPSS 0.49%Mar 30, 2026
- Medium5.5A flaw was found in virtio-win.Check if you run itEPSS 0.16%Mar 30, 2026
- High8.8An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1.Check if you run itEPSS 0.32%Mar 30, 2026
- Medium6.1A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.26%Mar 30, 2026
- High7.1A Cross-Site Request Forgery (CSRF) vulnerability in the WatchGuard Fireware OS WebUI could allow a remote attacker to trigger a denial-of-service (DoS) condition in t…Check if you run itEPSS 0.24%Mar 30, 2026
- High8.2A flaw was found in libsoup.Check if you run itEPSS 0.25%Mar 30, 2026
- High8.3A critical security vulnerability in parisneo/lollms versions up to 2.2.0 allows any authenticated user to accept or reject friend requests belonging to other users.Check if you run itEPSS 0.27%Mar 29, 2026
- High7.5A Server-Side Request Forgery (SSRF) vulnerability exists in parisneo/lollms versions prior to 2.2.0, specifically in the endpoint.Check if you run itEPSS 1.76%Mar 29, 2026
- High8.8In Sofia on Xiongmai DVR/NVR (AHB7008T-MH-V2 and NBD7024H-P) 4.03.R11 devices, root OS command injection can occur via shell metacharacters in the HostName value via a…Check if you run itEPSS 1.87%Mar 29, 2026
- High8.7OpenClaw before 2026.3.13 reads and buffers Telegram webhook request bodies before validating the x-telegram-bot-api-secret-token header, allowing unauthenticated atta…Check if you run itEPSS 0.73%Mar 29, 2026
- High7.1OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing authenticated operators with only operator.write permission to access admin-only brow…Check if you run itEPSS 0.40%Mar 29, 2026
- Medium6.9OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing write-scoped callers to reach admin-only session reset logic.Check if you run itEPSS 0.14%Mar 29, 2026
- Critical9.3OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability allowing leaf subagents to access the subagents control surface and resolve against parent r…Check if you run itEPSS 0.16%Mar 29, 2026
- Medium5.5A vulnerability was identified in elecV2 elecV2P up to 3.8.3.Check if you run itEPSS 0.47%Mar 28, 2026
- Critical9.8Amon2 versions before 6.17 for Perl use an insecure random_string implementation for security functions.Check if you run itEPSS 0.52%Mar 28, 2026
- Critical9.6Hackage CSRF vulnerabilityCheck if you run itEPSS 0.18%Mar 28, 2026
- Medium6.9A vulnerability was detected in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054.Check if you run itEPSS 0.65%Mar 28, 2026
- Medium5.5A vulnerability was identified in Sinaptik AI PandasAI up to 0.1.4.Check if you run itEPSS 0.41%Mar 28, 2026
- Critical9.3EChat Server 3.1 contains a buffer overflow vulnerability in the chat.ghp endpoint that allows remote attackers to execute arbitrary code by supplying an oversized use…Check if you run itEPSS 0.82%Mar 28, 2026