Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Tautulli is a Python based monitoring and tracking tool for Plex Media Server.Check if you run itEPSS 0.28%Mar 30, 2026
- High7.5Tautulli is a Python based monitoring and tracking tool for Plex Media Server.Check if you run itEPSS 0.49%Mar 30, 2026
- Critical9.4Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.33%Mar 30, 2026
- Low3.3An incomplete fix for CVE-2024-36137 leaves and in the promises API without the required permission checks, while their callback-based equivalents ( , ) were correctly patched.Check if you run itEPSS 0.14%Mar 30, 2026
- Low3.3A flaw in Node.js Permission Model filesystem enforcement leaves without the required read permission checks, while all comparable filesystem functions correctly enforce them.Check if you run itEPSS 0.15%Mar 30, 2026
- Medium5.3A memory leak occurs in Node.js HTTP/2 servers when a client sends WINDOW_UPDATE frames on stream 0 (connection-level) that cause the flow control window to exceed the maximum valuCheck if you run itEPSS 0.43%Mar 30, 2026
- High7.5Node.js: Node.js: Denial of Service due to crafted HTTP headerCheck this weekEPSS 25.44%Mar 30, 2026
- Medium6.9A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01.Check if you run itEPSS 0.35%Mar 30, 2026
- Critical9.2Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lackingCheck if you run itEPSS 0.60%Mar 30, 2026
- High7.8Symantec Data Loss Prevention Windows Endpoint, prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15, may be susceptible to a Elevation of Privilege vulnCheck if you run itEPSS 0.20%Mar 30, 2026
- Critical9.8Nginx UI is a web user interface for the Nginx web server.Patch nowKEVEPSS 35.27%Mar 30, 2026
- Medium5.3A flaw has been found in SourceCodester RSS Feed Parser 1.0.Check if you run itEPSS 0.27%Mar 30, 2026
- Medium6.9Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.41%Mar 30, 2026
- High7.1Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.55%Mar 30, 2026
- Medium6.9Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.98%Mar 30, 2026
- Critical9.9Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.29%Mar 30, 2026
- High7.5The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which mCheck if you run itEPSS 0.39%Mar 30, 2026
- Medium6.8OpenSC is an open source smart card tools and middleware.Check if you run itEPSS 0.17%Mar 30, 2026
- Low2.8go-git is an extensible git implementation library written in pure Go.Check if you run itEPSS 0.18%Mar 30, 2026
- Medium6.8OpenSC is an open source smart card tools and middleware.Check if you run itEPSS 0.29%Mar 30, 2026
- Medium6.8OpenSC is an open source smart card tools and middleware.Check if you run itEPSS 0.26%Mar 30, 2026
- Medium4.8A vulnerability was detected in raine consult-llm-mcp up to 2.5.3.Check if you run itEPSS 0.93%Mar 30, 2026
- Medium6.8OpenSC is an open source smart card tools and middleware.Check if you run itEPSS 0.14%Mar 30, 2026
- Medium5.1Smoothwall Express versions prior to 3.1 Update 13 contain a reflected cross-site scripting vulnerability in the /redirect.cgi endpoint due to improper sanitation of the url parameCheck if you run itEPSS 0.16%Mar 30, 2026
- Medium5.1Smoothwall Express versions prior to 3.1 Update 13 contain a stored cross-site scripting vulnerability in the /cgi-bin/vpnmain.cgi script due to improper sanitation of the VPN_IP pCheck if you run itEPSS 0.14%Mar 30, 2026
Sort