Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1A security flaw in the IdentityBrokerService.performLogin endpoint of Keycloak allows authentication to proceed using an Identity Provider (IdP) even after it has been…Check if you run itEPSS 0.50%Mar 5, 2026
- High7.5Traefik is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.65%Mar 5, 2026
- Medium5.3OpenProject is an open-source, web-based project management software.Check if you run itEPSS 0.38%Mar 5, 2026
- Medium5.0Twenty is an open source CRM.Check if you run itEPSS 0.33%Mar 5, 2026
- High8.1A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset pas…Check if you run itEPSS 0.41%Mar 5, 2026
- High8.8An authorization bypass vulnerability in Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to escalate privileges across role boundaries vi…Check if you run itEPSS 0.60%Mar 5, 2026
- Medium6.9A denial-of-service (DoS) vulnerability was identified in Omada EAP610 v3.Check if you run itEPSS 0.22%Mar 5, 2026
- High7.8A stack buffer overflow vulnerability exists in the Wincor Nixdorf wnBios64.sys kernel driver (version 1.2.0.0) in the IOCTL handler for code 0x80102058.Check if you run itEPSS 0.25%Mar 5, 2026
- Critical9.8D-Link DIR-513 version 1.10 contains a critical-level vulnerability.Check if you run itEPSS 0.70%Mar 5, 2026
- Critical9.3Cross-Site Request Forgery (CSRF) vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Flutter URI scheme handler,…Check if you run itEPSS 0.36%Mar 5, 2026
- Medium5.4Mercurius is a GraphQL adapter for Fastify.Check if you run itEPSS 0.17%Mar 5, 2026
- High7.5In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed HTTP request, with Content-Encoding: gzip, is…Check if you run itEPSS 0.69%Mar 5, 2026
- Medium6.4Server-Side Request Forgery (SSRF) vulnerability in SkatDesign Ratatouille ratatouille allows Server Side Request Forgery.This issue affects Ratatouille: from n/a through <= 1.2.6.Check if you run itEPSS 0.24%Mar 5, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in ThemeREX Equestrian Centre equestrian-centre allows Object Injection.This issue affects Equestrian Centre: from n/a…Check if you run itEPSS 0.41%Mar 5, 2026
- Critical9.3An HTTP Request Smuggling vulnerability (CWE-444) has been found in Pingora's parsing of HTTP/1.0 and Transfer-Encoding requests.Check if you run itEPSS 0.60%Mar 5, 2026
- Critical9.3An HTTP request smuggling vulnerability (CWE-444) was found in Pingora's handling of HTTP/1.1 connection upgrades.Check if you run itEPSS 0.53%Mar 5, 2026
- Low3.4Dark Reader is an accessibility browser extension that makes web pages colors dark.Check if you run itEPSS 0.11%Mar 4, 2026
- High7.5cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.63%Mar 4, 2026
- Medium5.3cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.43%Mar 4, 2026
- Medium5.9OpenDeck is Linux software for your Elgato Stream Deck.Check if you run itEPSS 0.52%Mar 4, 2026
- High7.7A Server-Side Request Forgery (SSRF) vulnerability was identified in the @opennextjs/cloudflare package, resulting from a path normalization bypass in the /cdn-cgi/ima…Check if you run itEPSS 0.45%Mar 4, 2026
- Medium6.1A vulnerability in the VPN web services component of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) So…Check if you run itEPSS 0.28%Mar 4, 2026
- Medium4.3A vulnerability in the VPN web services component of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) So…Check if you run itEPSS 0.29%Mar 4, 2026
- High8.6A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could…Check if you run itEPSS 0.37%Mar 4, 2026
- Medium4.9A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.Check if you run itEPSS 0.30%Mar 4, 2026