Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3Chamilo LMS is a learning management system.Check if you run itEPSS 0.38%Mar 16, 2026
- Medium6.9Buffalo TeraStation NAS TS5400R firmware version 4.02-0.06 and prior contain an excessive file permissions vulnerability that allows authenticated attackers to read the /etc/shadowCheck if you run itEPSS 0.58%Mar 16, 2026
- High7.7Craft CMS is a content management system (CMS).Check if you run itEPSS 9.69%Mar 16, 2026
- High8.6Craft CMS is a content management system (CMS).Check if you run itEPSS 0.59%Mar 16, 2026
- High8.6Craft CMS is a content management system (CMS).Check if you run itEPSS 0.57%Mar 16, 2026
- Medium5.3Craft CMS is a content management system (CMS).Check if you run itEPSS 0.33%Mar 16, 2026
- High8.5Webhooks for Craft CMS plugin adds the ability to manage “webhooks” in Craft CMS, which will send GET or POST requests when certain events occur.Check if you run itEPSS 0.43%Mar 16, 2026
- High7.4FastMCP is the standard framework for building MCP applications.Check if you run itEPSS 0.42%Mar 16, 2026
- Medium5.8A missing S3 ownership verification in the Bedrock AgentCore Starter Toolkit before version v0.1.13 may allow a remote actor to inject code during the build process, leading to codCheck if you run itEPSS 0.29%Mar 16, 2026
- High8.2Authlib is a Python library which builds OAuth and OpenID Connect servers.Check if you run itEPSS 0.26%Mar 16, 2026
- Medium6.0When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model a C stack overflow occurs.Check if you run itEPSS 0.77%Mar 16, 2026
- High8.3Authlib is a Python library which builds OAuth and OpenID Connect servers.Check if you run itEPSS 0.16%Mar 16, 2026
- Medium6.0The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete.Check if you run itEPSS 0.54%Mar 16, 2026
- Critical9.1Authlib is a Python library which builds OAuth and OpenID Connect servers.Check if you run itEPSS 0.61%Mar 16, 2026
- Critical9.3A weakness has been identified in Tenda AC8 up to 16.03.50.11.Check if you run itEPSS 1.01%Mar 16, 2026
- High7.8Dell ThinOS 10 versions prior to ThinOS 2602_10.0573, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability.Check if you run itEPSS 0.50%Mar 16, 2026
- Critical9.1Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms.Check if you run itEPSS 0.34%Mar 16, 2026
- Medium5.1A security flaw has been discovered in Tenda AC8 16.03.50.11.Check if you run itEPSS 8.14%Mar 16, 2026
- Medium5.1Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript by manipCheck if you run itEPSS 0.16%Mar 16, 2026
- Medium5.1Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript by manipCheck if you run itEPSS 0.16%Mar 16, 2026
- Medium5.1Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a reflected cross-site scripting vulnerability in the Network Diagnosis ping function that allows attackers to executeCheck if you run itEPSS 0.18%Mar 16, 2026
- Medium5.1Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a cross-site request forgery vulnerability that allows attackers to modify device configuration by exploiting missing CCheck if you run itEPSS 0.13%Mar 16, 2026
- Critical9.3A vulnerability was identified in Tenda AC8 16.03.50.11.Check if you run itEPSS 1.43%Mar 16, 2026
- Medium5.4Missing Authorization vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP…Check if you run itEPSS 0.20%Mar 16, 2026
- Medium6.8Improper Protection of Alternate Path exists in the no-access and workdir feature of the AWS API MCP Server versions >= 0.2.14 and < 1.3.9 on all platforms may allow the bypass ofCheck if you run itEPSS 0.15%Mar 16, 2026
Sort