Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Fortinet FortiClient EMS Improper Access Control VulnerabilityPatch nowKEVEPSS 93.98%Apr 3, 2026
- Critical9.8Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.73%Apr 3, 2026
- Medium5.3Rack is a modular Ruby web server interface.Check if you run itEPSS 0.26%Apr 2, 2026
- Medium6.0mppx is a TypeScript interface for machine payments protocol.Check if you run itEPSS 0.51%Mar 31, 2026
- High8.8Google Dawn Use-After-Free VulnerabilityPatch nowKEVEPSS 13.74%Mar 31, 2026
- High7.5Netty is an asynchronous, event-driven network application framework.Check if you run itEPSS 0.70%Mar 27, 2026
- High7.5The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes.Check if you run itEPSS 0.79%Mar 27, 2026
- Critical9.1A chained attack via SQL Expressions and a Grafana Enterprise plugin can lead to a remote arbitrary code execution impact (RCE).Check if you run itEPSS 1.96%Mar 27, 2026
- Critical9.8In Spring AI, a SpEL injection vulnerability exists in SimpleVectorStore when a user-supplied value is used as a filter expression key.Check if you run itEPSS 1.11%Mar 27, 2026
- High7.8BentoML is a Python library for building online serving systems optimized for AI apps and model inference.Check if you run itEPSS 0.26%Mar 27, 2026
- High8.7Langflow is a tool for building and deploying AI-powered agents and workflows.Patch nowKEVEPSS 19.58%Mar 24, 2026
- High8.7strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a…Check if you run itEPSS 1.05%Mar 23, 2026
- Critical9.1gRPC-Go is the Go language implementation of gRPC.Check if you run itEPSS 1.58%Mar 20, 2026
- High8.6WWBN AVideo is an open source video platform.Check if you run itEPSS 0.46%Mar 20, 2026
- Critical9.8OS command injection in the CWMP client (/ftl/bin/cwmp) of Small Cell Sercomm SCE4255W (FreedomFi Englewood) firmware before DG3934v3@2308041842 allows remote attacker…Check if you run itEPSS 1.27%Mar 19, 2026
- High8.8A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx.Check if you run itEPSS 1.45%Mar 19, 2026
- Critical9.3Langflow Code Injection VulnerabilityPatch nowKEVEPSS 96.18%Mar 19, 2026
- High7.7A flaw was found in Keycloak.Check if you run itEPSS 0.38%Mar 18, 2026
- Medium5.3Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.21%Mar 18, 2026
- Medium5.5A weakness has been identified in glowxq glowxq-oj up to 6f7c723090472057252040fd2bbbdaa1b5ed2393.Check if you run itEPSS 0.80%Mar 16, 2026
- Medium6.3Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job.Check if you run itEPSS 0.42%Mar 11, 2026
- Medium4.8Supabase Auth is a JWT based API for managing users and issuing JWT tokens.Check if you run itEPSS 0.15%Mar 11, 2026
- High7.5Server-Side Request Forgery (SSRF) vulnerability in pdfmake versions 0.3.0-beta.2 through 0.3.5 allows a remote attacker to obtain sensitive information via the src/UR…Check if you run itEPSS 0.51%Mar 10, 2026
- High8.7An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to ac…Check this weekEPSS 39.80%Mar 10, 2026
- Critical9.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.55%Mar 7, 2026
Sort