Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices.Check if you run itEPSS 0.59%Jun 3, 2026
- Critical9.8ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy Assessment: Fully addressed.Check if you run itEPSS 0.50%Jun 3, 2026
- High7.7A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI Gateway secrets, which can be exploited to exfiltrat…Check if you run itEPSS 0.66%Jun 3, 2026
- Medium5.3Impact: The morgan logging middleware's :remote-user token extracts the Basic auth username from the Authorization request header and writes it to the log stream witho…Check if you run itEPSS 0.41%Jun 3, 2026
- Low2.3In Vinyl Cache before 9.0.1 and Varnish Cache before 9.0.3, a deficiency in HTTP/2 request parsing can be exploited to launch a backend request desync attack (request…Check if you run itEPSS 0.47%Jun 3, 2026
- Low2.3A flaw has been found in dask up to 3.0.Check if you run itEPSS 0.29%Jun 3, 2026
- High7.3Cpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys when dupkeys_as_arrayref is enabled.Check if you run itEPSS 0.41%Jun 3, 2026
- Medium4.3The EmergencyWP – Dead Man's switch & legacy deliverance plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.2.Check if you run itEPSS 0.19%Jun 3, 2026
- Medium4.4The Passeum Ticketing plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.0.Check if you run itEPSS 0.33%Jun 3, 2026
- Low2.1A weakness has been identified in johnhuang316 code-index-mcp up to 2.14.0.Check if you run itEPSS 0.31%Jun 3, 2026
- Low2.1A vulnerability was identified in wonderwhy-er DesktopCommanderMCP 0.2.37.Check if you run itEPSS 0.22%Jun 3, 2026
- Medium5.7LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.Check if you run itEPSS 0.40%Jun 2, 2026
- Medium6.5LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.Check if you run itEPSS 0.39%Jun 2, 2026
- Critical9.6LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.Check if you run itEPSS 0.41%Jun 2, 2026
- High7.1LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.Check if you run itEPSS 0.34%Jun 2, 2026
- Medium6.5(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries.Check if you run itEPSS 0.59%Jun 2, 2026
- High8.2QloApps through 1.7.0, fixed in commit 64e9722, contains a weak cryptographic algorithm vulnerability that allows attackers to compromise user credentials by exploitin…Check if you run itEPSS 0.27%Jun 2, 2026
- Low2.0A vulnerability was determined in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b.Check if you run itEPSS 0.18%Jun 2, 2026
- Low2.1A vulnerability was found in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b.Check if you run itEPSS 0.23%Jun 2, 2026
- High8.2Fixed a VM panic caused by unbounded recursion in the grpcfuse kernel module when a container created deeply nested directories on a bind-mounted host folder and trigg…Check if you run itEPSS 0.15%Jun 2, 2026
- Medium5.3OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.Check if you run itEPSS 0.25%Jun 2, 2026
- Low2.1A vulnerability has been found in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b.Check if you run itEPSS 0.25%Jun 2, 2026
- Medium5.5A flaw has been found in warmcat libwebsockets up to 4.5.8.Check if you run itEPSS 0.43%Jun 2, 2026
- High7.0Dräger Zeus Infinity Empowered (Zeus IE) and Zeus RS C500 anesthesia workstations contain a local security vulnerability that allows unauthorized individuals with phys…Check if you run itEPSS 0.17%Jun 2, 2026
- High8.7Dräger Core 1.0.5 and Dräger M540 Converter Service 1.0.9 contain a denial of service vulnerability that allows network-adjacent attackers to trigger high CPU load by…Check if you run itEPSS 0.28%Jun 2, 2026
Sort