Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8A vulnerability was identified in bazinga012 mcp_code_executor up to 0.3.0.Check if you run itEPSS 0.81%Mar 16, 2026
- High7.5An issue in GoBGP gobgpd v.4.2.0 allows a remote attacker to cause a denial of service via the NEXT_HOP path attributeCheck if you run itEPSS 0.39%Mar 16, 2026
- Critical9.8A command injection vulnerability in the minimal_wrapper.py component of kubectl-mcp-server v1.2.0 allows attackers to execute arbitrary commands via injecting arbitrary shell metaCheck if you run itEPSS 2.39%Mar 16, 2026
- Critical9.8A write-what-where condition in p2r3 Bareiron commit 8e4d40 allows unauthenticated attackers to write arbitrary values to memory, enabling arbitrary code execution via a crafted paCheck if you run itEPSS 0.59%Mar 16, 2026
- Critical9.1An out-of-bounds memory access (OOB) in p2r3 Bareiron commit 8e4d40 allows unauthenticated attackers to access sensitive information and cause a Denial of Service (DoS) via supplyiCheck if you run itEPSS 0.40%Mar 16, 2026
- High8.8A local, non-privileged attacker can abuse a vulnerable IOCTL interface exposed by the OpenEDR 2.5.1.0 kernel driver to modify the DLL injection path used by the product.Check if you run itEPSS 0.21%Mar 16, 2026
- High7.8A local attacker can bypass OpenEDR's 2.5.1.0 self-defense mechanism by renaming a malicious executable to match a trusted process name (e.g., csrss.exe, edrsvc.exe, edrcon.exe).Check if you run itEPSS 0.18%Mar 16, 2026
- High7.5SQL Injection vulnerability in Chyrp v.2.5.2 and before allows a remote attacker to obtain sensitive information via the Admin.php componentCheck if you run itEPSS 0.48%Mar 16, 2026
- Medium5.3An Incorrect Access Control vulnerability exists in INDEX-EDUCATION PRONOTE prior to 2025.2.8.Check if you run itEPSS 0.28%Mar 16, 2026
- Medium5.4Out-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 video decoder (libavcodec/rv60dec.c).Check if you run itEPSS 0.31%Mar 16, 2026
- Medium6.5In Forgejo through 13.0.3, the attachment component allows a denial of service by uploading a multi-gigabyte file attachment (e.g., to be associated with an issue or a release).Check if you run itEPSS 0.53%Mar 16, 2026
- High7.5Doom Launcher 3.8.1.0 is vulnerable to Directory Traversal due to missing file path validation during the extraction of game filesCheck if you run itEPSS 0.76%Mar 16, 2026
- Medium5.4An authenticated arbitrary file upload vulnerability in the Courses/Work Assignments module of gunet Open eClass v3.11, and fixed in v3.13, allows attackers to execute arbitrary coCheck if you run itEPSS 0.29%Mar 16, 2026
- Medium6.1Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" field on object forms.Check if you run itEPSS 0.21%Mar 16, 2026
- High8.8The script in Use It Flow administration website before 10.0.0 is vulnerable to Remote Code Execution.Check if you run itEPSS 0.71%Mar 16, 2026
- Medium4.8A vulnerability was determined in hypermodel-labs mcp-server-auto-commit 1.0.0.Check if you run itEPSS 0.81%Mar 15, 2026
- Medium5.3A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DCheck this weekEPSS 21.76%Mar 15, 2026
- Medium5.3A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-3Check if you run itEPSS 4.83%Mar 15, 2026
- Medium5.3A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-3Check if you run itEPSS 4.52%Mar 15, 2026
- Medium6.9A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343Check if you run itEPSS 5.59%Mar 15, 2026
- Medium6.9A security vulnerability has been detected in D-Link DIR-823G 1.0.2B05.Check if you run itEPSS 0.91%Mar 15, 2026
- Medium5.3A vulnerability has been found in AvinashBole quip-mcp-server 1.0.0.Check if you run itEPSS 1.63%Mar 15, 2026
- Medium6.9A flaw has been found in JawherKl node-api-postgres up to 2.5.Check if you run itEPSS 0.39%Mar 15, 2026
- Medium6.9A vulnerability was detected in JawherKl node-api-postgres up to 2.5.Check if you run itEPSS 0.29%Mar 15, 2026
- Medium5.1A weakness has been identified in phpipam up to 1.7.4.Check if you run itEPSS 0.29%Mar 15, 2026
Sort