Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.7VictoriaMetrics is a scalable solution for monitoring and managing time series data.Check if you run itEPSS 0.37%Nov 25, 2025
- Medium5.1WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime.Check if you run itEPSS 0.35%Nov 25, 2025
- Medium4.7WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime.Check if you run itEPSS 0.20%Nov 25, 2025
- Medium6.1GeoServer is an open source server that allows users to share and edit geospatial data.Check if you run itEPSS 0.32%Nov 25, 2025
- High8.8Fugue is a unified interface for distributed computing that lets users execute Python, Pandas, and SQL code on Spark, Dask, and Ray with minimal rewrites.Check if you run itEPSS 0.78%Nov 25, 2025
- High8.2CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing (requires 3 preprocessing rounds), identifiable abort, and a key refresh protocol.Check if you run itEPSS 0.22%Nov 25, 2025
- Critical9.3CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing (requires 3 preprocessing rounds), identifiable abort, and a key refresh protocol.Check if you run itEPSS 0.20%Nov 25, 2025
- High8.3A vulnerability in OpenSearch allows attackers to cause Denial of Service (DoS) by submitting complex query_string inputs.Check if you run itEPSS 0.73%Nov 25, 2025
- High8.2Grype is a vulnerability scanner for container images and filesystems.Check if you run itEPSS 0.16%Nov 25, 2025
- High8.6An interpretation-conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and earlier enables unauthenticated attackers to craft ASN.1 structures to desynchronize schema valiCheck if you run itEPSS 0.58%Nov 25, 2025
- Low3.3Contao is an Open Source CMS.Check if you run itEPSS 0.18%Nov 25, 2025
- High8.7UnForm Server versions < 10.1.15 contain an unauthenticated arbitrary file read and SMB coercion vulnerability in the Doc Flow feature’s 'arc' endpoint.Check if you run itEPSS 0.79%Nov 25, 2025
- Medium6.6Contao is an Open Source CMS.Check if you run itEPSS 0.19%Nov 25, 2025
- High7.6NVIDIA NeMo Agent Toolkit UI for Web contains a vulnerability in the chat API endpoint where an attacker may cause a Server-Side Request Forgery.Check if you run itEPSS 0.31%Nov 25, 2025
- High7.3NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predeCheck if you run itEPSS 0.17%Nov 25, 2025
- High7.8NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cause code injection.Check if you run itEPSS 0.22%Nov 25, 2025
- Low2.3NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to be reused.Check if you run itEPSS 0.15%Nov 25, 2025
- Low3.2NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause incorrect control flow behavior.Check if you run itEPSS 0.15%Nov 25, 2025
- Low3.3NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to be reused.Check if you run itEPSS 0.14%Nov 25, 2025
- Medium4.3NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a NULL pointer dereference.Check if you run itEPSS 0.18%Nov 25, 2025
- Medium4.4NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to be reused.Check if you run itEPSS 0.15%Nov 25, 2025
- Medium4.4NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause unexpected memory buffer operations.Check if you run itEPSS 0.16%Nov 25, 2025
- Medium5.7NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper processing of input data.Check if you run itEPSS 0.16%Nov 25, 2025
- Medium5.7NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper validation of integrity.Check if you run itEPSS 0.11%Nov 25, 2025
- Medium5.7NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read.Check if you run itEPSS 0.15%Nov 25, 2025
Sort