Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3An HTTP request smuggling vulnerability (CWE-444) was found in Pingora's handling of HTTP/1.1 connection upgrades.Check if you run itEPSS 0.67%Mar 4, 2026
- Medium5.7The import hook in CPython that handles legacy *.pyc files (SourcelessFileLoader) is incorrectly handled in FileLoader (a base class) and so does not use io.open_code(…Check if you run itEPSS 0.22%Mar 4, 2026
- Medium4.8Suprema’s BioStar 2 in version 2.9.11.6 allows users to set new password without providing the current one.Check if you run itEPSS 0.27%Mar 4, 2026
- High8.6The XWiki blog application allows users of the XWiki platform to create and manage blog posts.Check if you run itEPSS 0.44%Mar 4, 2026
- Medium6.5Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.28%Mar 4, 2026
- Critical9.8Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.59%Mar 4, 2026
- Medium5.4Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.26%Mar 4, 2026
- Medium6.3Open OnDemand is an open-source high-performance computing portal.Check if you run itEPSS 0.61%Mar 4, 2026
- High8.5Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes.Check if you run itEPSS 0.35%Mar 4, 2026
- Medium5.3NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.Check if you run itEPSS 0.26%Mar 4, 2026
- Low3.4Dark Reader is an accessibility browser extension that makes web pages colors dark.Check if you run itEPSS 0.13%Mar 4, 2026
- Critical9.3pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3 contain an authentication bypass vulnerability in JwtAuthenticator when processing encrypted JWTs that allows remote attackers tCheck if you run itEPSS 6.17%Mar 4, 2026
- Medium5.4Vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs.Check if you run itEPSS 0.19%Mar 4, 2026
- High8.3Vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs.Check if you run itEPSS 0.33%Mar 4, 2026
- High8.3Vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs.Check if you run itEPSS 0.33%Mar 4, 2026
- Medium6.0Vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs.Check if you run itEPSS 0.29%Mar 4, 2026
- Critical9.6Insufficient data validation in Navigation in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.Check if you run itEPSS 0.41%Mar 4, 2026
- High8.8Heap buffer overflow in WebCodecs in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.Check if you run itEPSS 0.35%Mar 4, 2026
- High8.8Inappropriate implementation in WebAudio in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 0.34%Mar 4, 2026
- Medium5.3cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.35%Mar 4, 2026
- Medium5.9OpenDeck is Linux software for your Elgato Stream Deck.Check if you run itEPSS 0.50%Mar 4, 2026
- High7.5cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.48%Mar 4, 2026
- High8.8Inappropriate implementation in V8 in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 0.33%Mar 4, 2026
- High8.8Inappropriate implementation in WebAssembly in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 0.40%Mar 4, 2026
- High8.8Inappropriate implementation in CSS in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.Check if you run itEPSS 0.29%Mar 4, 2026
Sort