Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Sipeed NanoKVM before 2.3.1 exposes a Wi-Fi configuration endpoint without proper security checks, allowing an unauthenticated attacker with network access to change t…Check if you run itEPSS 0.56%Mar 17, 2026
- Critical9.3JetKVM before 0.5.4 does not rate limit login requests, enabling brute-force attempts to guess credentials.Check if you run itEPSS 0.53%Mar 17, 2026
- Critical9.3The GL-iNet Comet (GL-RM1) KVM web interface does not limit login requests, enabling brute-force attempts to guess credentials.Check if you run itEPSS 0.57%Mar 17, 2026
- Medium6.1HTML Injection can be carried out in Product when a web application does not properly check or clean user input before showing it on a webpage.Check if you run itEPSS 0.16%Mar 17, 2026
- High7.5A flaw was found in libsoup, a library for handling HTTP requests.Check if you run itEPSS 0.86%Mar 17, 2026
- Low2.7HCL Sametime is vulnerable to broken server-side validation.Check if you run itEPSS 0.20%Mar 17, 2026
- High7.5Apache Airflow versions 3.1.0 through 3.1.7 session token (_token) in cookies is set to path=/ regardless of the configured [webserver] base_url or [api] base_url.Check if you run itEPSS 0.78%Mar 17, 2026
- Medium6.5Apache Airflow versions 3.0.0 through 3.1.7 FastAPI DagVersion listing API does not apply per-DAG authorization filtering when the request is made with dag_id set to "…Check if you run itEPSS 0.64%Mar 17, 2026
- Medium6.5A flaw was found in libsoup.Check if you run itEPSS 0.39%Mar 17, 2026
- Medium5.5A flaw was found in libsoup, a library used by applications to send network requests.Check if you run itEPSS 0.36%Mar 17, 2026
- Low2.3In affected versions of Octopus Server it was possible for a low privileged user to manipulate an API request to change the signing key expiration and revocation time…Check if you run itEPSS 0.26%Mar 17, 2026
- Low2.1A weakness has been identified in frdel/agent0ai agent-zero 0.9.7.Check if you run itEPSS 0.36%Mar 17, 2026
- Low2.0A vulnerability was determined in taoofagi easegen-admin up to 8f87936ac774065b92fb20aab55b274a6ea76433.Check if you run itEPSS 0.39%Mar 16, 2026
- High8.8The script in Use It Flow administration website before 10.0.0 is vulnerable to Remote Code Execution.Check if you run itEPSS 0.63%Mar 16, 2026
- Medium6.1Chamilo LMS is a learning management system.Check if you run itEPSS 0.27%Mar 16, 2026
- High8.8Chamilo LMS is a learning management system.Check if you run itEPSS 0.49%Mar 16, 2026
- High8.5Webhooks for Craft CMS plugin adds the ability to manage “webhooks” in Craft CMS, which will send GET or POST requests when certain events occur.Check if you run itEPSS 0.46%Mar 16, 2026
- Medium5.3An Incorrect Access Control vulnerability exists in INDEX-EDUCATION PRONOTE prior to 2025.2.8.Check if you run itEPSS 0.25%Mar 16, 2026
- High7.4FastMCP is the standard framework for building MCP applications.Check if you run itEPSS 0.37%Mar 16, 2026
- Medium5.1Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a cross-site request forgery vulnerability that allows attackers to modify device configuration by exploit…Check if you run itEPSS 0.17%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly enforce read permissions in search API endpoints which allows guest users…Check if you run itEPSS 0.17%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to validate team-specific upload_file permissions which allows a guest user to post fi…Check if you run itEPSS 0.38%Mar 16, 2026
- Medium5.5A vulnerability was found in vanna-ai vanna up to 2.0.2.Check if you run itEPSS 0.49%Mar 16, 2026
- Low2.1A security flaw has been discovered in FlowCI flow-core-x up to 1.23.01.Check if you run itEPSS 0.36%Mar 16, 2026
- Medium5.5A security flaw has been discovered in glowxq glowxq-oj up to 6f7c723090472057252040fd2bbbdaa1b5ed2393.Check if you run itEPSS 0.49%Mar 16, 2026