Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.9Lumiverse is a full-featured AI chat application.Check if you run itEPSS 0.68%May 26, 2026
- Critical9.1Lumiverse is a full-featured AI chat application.Check if you run itEPSS 0.86%May 26, 2026
- Medium6.3MaxKB is an open-source AI assistant for enterprise.Check if you run itEPSS 0.37%May 26, 2026
- Critical9.8IBM HTTP Server 8.5, and 9.0 is vulnerable to remote code execution and denial of service in configurations with TLS mutual authentication (client authentication).Check if you run itEPSS 0.85%May 26, 2026
- High8.1FastNetMon Community Edition through 1.2.9 contains a configuration injection vulnerability in the Juniper router integration plugin.Check if you run itEPSS 0.41%May 26, 2026
- High7.4FastNetMon Community Edition through 1.2.9 does not verify TLS certificates on outbound HTTPS connections.Check if you run itEPSS 0.27%May 26, 2026
- Medium5.5FastNetMon Community Edition through 1.2.9 is vulnerable to a local symlink attack via predictable file paths in /tmp.Check if you run itEPSS 0.17%May 26, 2026
- High8.2Algernon is a small self-contained pure-Go web server.Check if you run itEPSS 0.50%May 26, 2026
- High7.5Algernon is a small self-contained pure-Go web server.Check if you run itEPSS 0.42%May 26, 2026
- Critical9.0Algernon is a small self-contained pure-Go web server.Check if you run itEPSS 0.74%May 26, 2026
- Critical9.9Vowpal Wabbit is a machine learning system.Check if you run itEPSS 0.58%May 26, 2026
- Medium4.3Bugsink is a self-hosted error tracking tool.Check if you run itEPSS 0.39%May 26, 2026
- Critical9.0A flaw was found in the Samba printing subsystem.Patch nowKEVEPSS 13.93%May 26, 2026
- High8.7FreeRDP before 3.26.0 contains a heap-buffer-overflow vulnerability in gdi_CacheToSurface that allows remote attackers to write out-of-bounds heap memory.Check if you run itEPSS 1.06%May 26, 2026
- None0.0Apache Shiro’s Jakarta EE module used the HTTP Referer header in certain cases to issue redirect after a user login.Check if you run itEPSS 0.45%May 25, 2026
- Low2.1A security flaw has been discovered in dazeb cline-mcp-memory-bank up to 55c81b9cf6c16700983c84dc4cdea3cafa19a75f.Check if you run itEPSS 0.40%May 25, 2026
- High8.7Allocation of Resources Without Limits or Throttling vulnerability in benoitc hackney allows Flooding.Check if you run itEPSS 0.82%May 25, 2026
- Medium6.0Sensitive Data Exposure vulnerability in benoitc hackney allows Retrieve Embedded Sensitive Data.Check if you run itEPSS 0.35%May 25, 2026
- High8.7Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in benoitc hackney allows Excessive Allocation.Check if you run itEPSS 0.70%May 25, 2026
- High7.0Soroush IM Desktop App 0.17.0 contains an authentication bypass vulnerability that allows local attackers to remove passcodes by injecting pre-encrypted database entri…Check if you run itEPSS 0.12%May 25, 2026
- Low1.9A security flaw has been discovered in NousResearch hermes-agent 2026.4.23.Check if you run itEPSS 0.32%May 24, 2026
- High7.5In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known token with no accompanying = character.Check if you run itEPSS 0.63%May 24, 2026
- High8.7NukeViet CMS is a multi Content Management System.Check if you run itEPSS 0.61%May 22, 2026
- High8.8The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop.Check if you run itEPSS 0.20%May 22, 2026
- High7.1authentik is an open-source identity provider.Check if you run itEPSS 0.56%May 22, 2026