Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause aCheck if you run itEPSS 0.61%Oct 1, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.61%Sep 10, 2026
- High8.7MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that creates unbounded connections and threads without limits.Check if you run itEPSS 0.63%Sep 3, 2026
- Critical9.3MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write variables.Check if you run itEPSS 0.81%Sep 3, 2026
- High7.5mod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality.Check if you run itEPSS 0.49%Aug 21, 2026
- UnknownHTTP/2 Bomb CVE-2026-49975Check if you run itEPSS 4.17%Aug 12, 2026
- Critical9.1A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set "super cookies" that bypass the Public Suffix List check.Check if you run itEPSS 0.66%Jul 3, 2026
- High7.5Zephyr's HTTP server (subsys/net/lib/http) provides a static-filesystem resource type (HTTP_RESOURCE_TYPE_STATIC_FS, available when CONFIG_FILE_SYSTEM is enabled) that…Check if you run itEPSS 0.87%Jun 29, 2026
- Critical9.8A remote, unauthenticated attacker can trigger memory corruption in Zephyr's HTTP server WebSocket upgrade path by sending a crafted Sec-WebSocket-Key header.Check if you run itEPSS 0.86%Jun 9, 2026
- High7.1BrowserStack Runner through 0.9.5 contains a path traversal vulnerability in the _default HTTP handler in lib/server.js that allows unauthenticated network-adjacent at…Check if you run itEPSS 0.42%Jun 2, 2026
- Medium6.5OpenClaude is an open-source coding-agent command line interface for cloud and local model providers.Check if you run itEPSS 0.29%Jun 2, 2026
- Medium6.9Music Player Daemon (MPD) before version 0.24.11 contains a server-side request forgery vulnerability in CurlInputPlugin where CURLOPT_FOLLOWLOCATION is set without CU…Check if you run itEPSS 0.48%May 28, 2026
- Critical9.8IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service and a potential remote code execution due to improper input validation.Check if you run itEPSS 0.86%May 26, 2026
- Critical9.1IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service in configurations where an attacker has write access to parts of the server configuration.Check if you run itEPSS 0.34%May 26, 2026
- Critical9.8IBM HTTP Server 8.5, and 9.0 is vulnerable to remote code execution and denial of service in configurations with TLS mutual authentication (client authentication).Check if you run itEPSS 0.85%May 26, 2026
- High7.5IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_mem_cache.Check if you run itEPSS 0.46%May 26, 2026
- High7.3IBM HTTP Server 8.5, and 9.0 is vulnerable to invalid pointer dereference.Check if you run itEPSS 0.31%May 26, 2026
- High8.0IBM HTTP Server 8.5, and 9.0 contains a buffer overflow vulnerability.Check if you run itEPSS 0.34%May 26, 2026
- High7.5IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_fastcgi module.Check if you run itEPSS 0.33%May 26, 2026
- High7.5IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_ibm_upload.Check if you run itEPSS 0.46%May 26, 2026
- Critical9.8An authentication bypass vulnerability exists in the embedded HTTP server of Panabit PAP-XM320 up to and including v7.7.Check if you run itEPSS 1.52%May 19, 2026
- High8.8RMCP is an official Rust SDK for the Model Context Protocol.Check if you run itEPSS 0.24%May 14, 2026
- Medium5.9Granian is a Rust HTTP server for Python applications.Check if you run itEPSS 0.37%May 12, 2026
- High7.5Granian is a Rust HTTP server for Python applications.Check if you run itEPSS 0.46%May 12, 2026
- Critical9.8Horovod thru 0.28.1 contains an insecure deserialization vulnerability (CWE-502) in its KVStore HTTP server component.Check if you run itEPSS 1.03%May 12, 2026