Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability.Check if you run itEPSS 0.54%Mar 13, 2026
- High8.1Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability.Check if you run itEPSS 0.54%Mar 13, 2026
- High8.0Philips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 0.66%Mar 13, 2026
- High8.8Philips Hue Bridge HomeKit Pair-Setup Heap-based Buffer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 0.69%Mar 13, 2026
- High8.0Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 0.41%Mar 13, 2026
- Critical9.9Apollo Federation is an architecture for declaratively composing APIs into a unified graph.Check if you run itEPSS 0.60%Mar 13, 2026
- Critical9.7AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.Check if you run itEPSS 0.82%Mar 13, 2026
- High7.5Go ShangMi (Commercial Cryptography) Library (GMSM) is a cryptographic library that covers the Chinese commercial cryptographic public algorithms SM2/SM3/SM4/SM9/ZUC.Check if you run itEPSS 0.24%Mar 13, 2026
- High7.1IBM CICS Transaction Gateway for Multiplatforms 9.3 and 10.1 could allow a user to transfer or view files due to improper access controls.Check if you run itEPSS 0.23%Mar 13, 2026
- High7.5AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.Check if you run itEPSS 0.46%Mar 13, 2026
- High8.2xml-security is a library that implements XML signatures and encryption.Check if you run itEPSS 0.16%Mar 13, 2026
- Medium6.9Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.40%Mar 13, 2026
- Medium6.9Improper Handling of Highly Compressed Data (Compression Bomb) vulnerability in Erlang OTP ssh (ssh_transport modules) allows Denial of Service via Resource Depletion.Check if you run itEPSS 0.74%Mar 13, 2026
- Medium5.3Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP (ssh_sftpd module) allows Path Traversal.Check if you run itEPSS 0.41%Mar 13, 2026
- High7.0Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in Erlang OTP (inets httpd module) allows HTTP Request Smuggling.Check if you run itEPSS 0.51%Mar 13, 2026
- Medium5.1wpDiscuz before 7.6.47 contains a cross-site scripting vulnerability in the customCss field that allows administrators to inject malicious scripts by breaking out of style tags.Check if you run itEPSS 0.26%Mar 13, 2026
- Medium5.3IBM Aspera Console 3.3.0 through 3.4.8 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency.Check if you run itEPSS 0.31%Mar 13, 2026
- High8.7Voltronic Power SNMP Web Pro version 1.1 contains a pre-authentication path traversal vulnerability in the upload.cgi endpoint that allows unauthenticated attackers to…Check if you run itEPSS 1.10%Mar 13, 2026
- High8.8Voltronic Power SNMP Web Pro version 1.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to access privileged management function…Check if you run itEPSS 0.31%Mar 13, 2026
- Medium4.9IBM Aspera Console 3.3.0 through 3.4.8 could allow a privileged user to cause a denial of service due to improper enforcement of behavioral workflow.Check if you run itEPSS 0.49%Mar 13, 2026
- Medium5.3IBM Aspera Console 3.3.0 through 3.4.8 could allow an attacker to enumerate usernames due to an observable response discrepancy.Check if you run itEPSS 0.28%Mar 13, 2026
- High8.7Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP.Check if you run itEPSS 0.52%Mar 13, 2026
- High8.2xmlseclibs is a library written in PHP for working with XML Encryption and Signatures.Check if you run itEPSS 0.17%Mar 13, 2026
- Medium6.5LibreChat is a ChatGPT clone with additional features.Check if you run itEPSS 0.44%Mar 13, 2026
- High7.6LibreChat is a ChatGPT clone with additional features.Check if you run itEPSS 0.29%Mar 13, 2026
Sort