Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5A flaw in Node.js URL processing causes an assertion failure in native code when is called with a malformed internationalized domain name (IDN) containing invalid char…Check if you run itEPSS 0.33%Mar 30, 2026
- Medium6.3A security vulnerability has been detected in osrg GoBGP up to 4.3.0.Check if you run itEPSS 0.30%Mar 30, 2026
- High7.5CrewAI contains a arbitrary local file read vulnerability in the JSON loader tool that reads files without path validation, enabling access to files on the server.Check if you run itEPSS 0.63%Mar 30, 2026
- Critical9.8CrewAI contains a server-side request forgery vulnerability that enables content acquisition from internal and cloud services, facilitated by the RAG search tools not properly valiCheck if you run itEPSS 0.51%Mar 30, 2026
- Critical9.8CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation.Check if you run itEPSS 0.76%Mar 30, 2026
- Critical9.6The CrewAI CodeInterpreter tool falls back to SandboxPython when it cannot reach Docker, which can enable RCE through arbitrary C function calling.Check if you run itEPSS 0.46%Mar 30, 2026
- Medium6.0A user with access to the cluster with a limited set of privilege actions can trigger a crash of a mongod process during the limited and unpredictable window when the cluster is beCheck if you run itEPSS 0.21%Mar 30, 2026
- High8.8An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1.Check if you run itEPSS 0.21%Mar 30, 2026
- Medium6.3A weakness has been identified in osrg GoBGP up to 4.3.0.Check if you run itEPSS 0.43%Mar 30, 2026
- High7.8A flaw was found in virtio-win, specifically within the VirtIO Block (BLK) device.Check if you run itEPSS 0.11%Mar 30, 2026
- Medium6.7A flaw was found in virtio-win.Check if you run itEPSS 0.11%Mar 30, 2026
- Medium6.3A security flaw has been discovered in osrg GoBGP up to 4.3.0.Check if you run itEPSS 0.30%Mar 30, 2026
- Low2.1BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Browsing Target GET_FOLDER_ITEMS handler that fails to validate packet boundariCheck if you run itEPSS 0.14%Mar 30, 2026
- Low2.1BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Controller GET_PLAYER_APPLICATION_SETTING_ATTRIBUTE_TEXT and GET_PLAYER_APPLICACheck if you run itEPSS 0.17%Mar 30, 2026
- Low2.1BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Controller LIST_PLAYER_APPLICATION_SETTING_ATTRIBUTES and LIST_PLAYER_APPLICATICheck if you run itEPSS 0.15%Mar 30, 2026
- High8.7A vulnerability of authorization bypass through user-controlled key in the 'console-survey/api/v1/answer/{EVENTID}/{TIMESTAMP}/' endpoint.Check if you run itEPSS 0.27%Mar 30, 2026
- High7.1A Cross-Site Request Forgery (CSRF) vulnerability in the WatchGuard Fireware OS WebUI could allow a remote attacker to trigger a denial-of-service (DoS) condition in the Fireware WCheck if you run itEPSS 0.17%Mar 30, 2026
- High8.4An Insecure Deserialization vulnerability in WatchGuard Fireware OS allows an attacker that has obtained write access to the local filesystem through another vulnerability to execuCheck if you run itEPSS 0.27%Mar 30, 2026
- High7.8TrueConf Client Download of Code Without Integrity Check VulnerabilityPatch nowKEVEPSS 5.85%Mar 30, 2026
- Medium6.9Device Monitoring Studio 8.10.00.8925 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string to theCheck if you run itEPSS 0.16%Mar 30, 2026
- High8.7Core FTP/SFTP Server 1.2 contains a buffer overflow vulnerability that allows attackers to crash the service by supplying an excessively long string in the User domain field.Check if you run itEPSS 0.70%Mar 30, 2026
- Medium6.9Navicat for Oracle 12.1.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the password fCheck if you run itEPSS 0.20%Mar 30, 2026
- Medium6.9NetworkActiv Web Server 4.0 contains a buffer overflow vulnerability in the username field of the Security options that allows local attackers to crash the application by supplyingCheck if you run itEPSS 0.22%Mar 30, 2026
- Medium6.9SmartFTP Client 9.0.2615.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Host fieldCheck if you run itEPSS 0.21%Mar 30, 2026
- Medium6.9WebDrive 18.00.5057 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the username field duCheck if you run itEPSS 0.21%Mar 30, 2026
Sort