Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.0ZITADEL is an open-source identity infrastructure tool.Check if you run itEPSS 0.30%Dec 9, 2025
- None0.0Next.js is vulnerable to RCE in React flight protocolCheck if you run itEPSS 0.00%Dec 3, 2025
- Critical10.0Meta React Server Components Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.80%Dec 3, 2025
- Critical9.4Ray-Project Ray Code Injection VulnerabilityPatch nowKEVEPSS 60.15%Nov 26, 2025
- High7.8Microsoft Windows Link Following VulnerabilityPatch nowKEVEPSS 4.61%Nov 11, 2025
- Critical9.1An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8.Check this weekEPSS 19.26%Nov 5, 2025
- High8.1MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability.Patch nowKEVEPSS 26.28%Oct 29, 2025
- Medium5.4A flaw was found in Keycloak.Check if you run itEPSS 0.30%Oct 23, 2025
- Medium6.3Strapi uses JSON Web Tokens (JWT) for authentication.Check if you run itEPSS 0.69%Oct 16, 2025
- High8.5A vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attacker with at least resource administrator role to exCheck if you run itEPSS 0.39%Oct 15, 2025
- Critical9.3F5 BIG-IP Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 2.30%Oct 15, 2025
- High7.8Linux Kernel Race Condition VulnerabilityPatch nowKEVEPSS 1.57%Oct 13, 2025
- High8.0Framelink Figma MCP Server before 0.6.3 allows an unauthenticated remote attacker to execute arbitrary operating system commands via a crafted HTTP POST request with shell metacharCheck if you run itEPSS 6.12%Oct 8, 2025
- Critical9.8SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 90.56%Sep 22, 2025
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.74%Sep 22, 2025
- Critical10.0Spring Cloud Gateway Server Webflux may be vulnerable to Spring Environment property modification.Patch nowKEVEPSS 3.67%Sep 16, 2025
- High7.5Hitachi Energy REB500Check if you run itEPSS 1.38%Sep 15, 2025
- Critical9.1Adobe Commerce and Magento Improper Input Validation VulnerabilityPatch nowKEVEPSS 95.35%Sep 9, 2025
- High7.9Svelte devalue is a utility library.Check if you run itEPSS 0.37%Aug 26, 2025
- UnknownAdobe experience_manager_forms Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 70.11%Aug 12, 2025
- Medium4.0An issue was discovered in Akamai Ghost, as used for the Akamai CDN platform before 2025-03-26.Check if you run itEPSS 0.57%Aug 7, 2025
- High8.1NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds write by sending a request.Check if you run itEPSS 1.61%Aug 6, 2025
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 100.00%Jul 18, 2025
- High7.4Tenda ac1206_firmware Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 1.75%Jul 13, 2025
- High8.9llama.cpp is an inference of several LLM models in C/C++.Check if you run itEPSS 0.36%Jul 10, 2025
Sort