Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A security flaw has been discovered in horizon921 mcpilot 0.1.0.Check if you run itEPSS 0.30%Jun 1, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authori…Check if you run itEPSS 0.38%Jun 1, 2026
- Critical9.6Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant.Check if you run itEPSS 0.21%Jun 1, 2026
- High8.7Use of hard-coded credentials in KS-SOMED allowed an unauthorized attacker access to FTP server that hosted the application's update packages.Check if you run itEPSS 0.42%Jun 1, 2026
- Medium5.9Exposure of Sensitive Information Through Metadata vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All.Check if you run itEPSS 0.51%Jun 1, 2026
- Medium6.5A bug in Apache Airflow's auth manager logout handling left previously-issued JWT tokens valid after the user clicked logout in the UI: the logout flow for and did not…Check if you run itEPSS 0.60%Jun 1, 2026
- Medium5.1SOPlanning is vulnerable to Stored Cross-Site Scripting (XSS) via /process/upload_backup endpoint.Check if you run itEPSS 0.40%Jun 1, 2026
- High8.8It was identified that the LDAP client implementation in version 2.1.7 does not verify if the server certificate matches the intended LDAP hostname.Check if you run itEPSS 0.26%Jun 1, 2026
- Low2.9A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.30.Check if you run itEPSS 0.27%Jun 1, 2026
- High7.4A vulnerability was determined in Tenda W12 3.0.0.7(4763).Check if you run itEPSS 0.48%May 31, 2026
- Medium5.3Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client.Check if you run itEPSS 0.44%May 30, 2026
- Low2.0StrongDM Desktop Application before 23.74.0 (Desktop Client before 53.77.0) on Microsoft Windows stores authentication state, including a JSON Web Token and asymmetric…Check if you run itEPSS 0.13%May 29, 2026
- High8.7cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.49%May 29, 2026
- High8.8FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.66%May 29, 2026
- High8.8FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.72%May 29, 2026
- High8.8FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.85%May 29, 2026
- Medium6.5Shopper is a Headless e-commerce Admin Panel.Check if you run itEPSS 0.31%May 29, 2026
- Critical9.8SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speec…Check if you run itEPSS 0.29%May 29, 2026
- High7.5SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speec…Check if you run itEPSS 0.38%May 29, 2026
- Critical9.3Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases.Check if you run itEPSS 0.21%May 29, 2026
- High8.7agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allows attackers to inject arbitrary SQL expressions by supplying mali…Check if you run itEPSS 0.40%May 29, 2026
- Critical9.1GitHub CLI (gh) is GitHub’s official command line tool.Check if you run itEPSS 0.45%May 29, 2026
- High8.7OpenClaw before 2026.5.18 contains a scope bypass vulnerability in the Gateway chat.send route that allows scoped clients to execute privileged commands.Check if you run itEPSS 0.45%May 29, 2026
- High7.5OpenClaw before 2026.5.18 contains an authorization bypass vulnerability in QQBot native approval buttons that fails to enforce configured approver identity.Check if you run itEPSS 0.36%May 29, 2026
- Medium6.5mcp-security provides Security and Authorization support for Model Context Protocol in Spring AI.Check if you run itEPSS 0.28%May 29, 2026