Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations.Check if you run itEPSS 0.62%Aug 21, 2026
- High7.1A stack-based out-of-bounds write vulnerability exists in the login request handling functionality of the administrative web interface of TP-Link TL-MR6400 v7 routers.Check if you run itEPSS 0.27%Aug 21, 2026
- High7.1A NULL pointer dereference vulnerability exists in the HTTP request parsing functionality of TL-MR6400 v7.Check if you run itEPSS 0.47%Aug 21, 2026
- Medium6.9The Brushfire platform's video content streaming application (https://online.brushfire.com) exposes database path in requests to users, allowing a remote, unauthentica…Check if you run itEPSS 0.53%Aug 21, 2026
- Critical10.0Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.80%Aug 21, 2026
- High8.3OpenViking before 0.3.4 contains a server-side request forgery vulnerability that allows authenticated low-privilege attackers to access internal network services by s…Check if you run itEPSS 0.34%Aug 21, 2026
- High8.7to_abs_path in scripts/iib/tool.py normalised the requested path with os.path.normpath, which collapses dot segments but does not resolve symbolic links.Check if you run itEPSS 0.51%Aug 21, 2026
- High8.7is_path_trusted in scripts/iib/api.py compares the requested path against each allowed parent directory with path.startswith(parent_path), without appending a path separator.Check if you run itEPSS 0.50%Aug 21, 2026
- Critical9.4Paperclip before 0.3.1 in default local_trusted mode fails to validate Host headers, allowing attackers to execute arbitrary commands via DNS rebinding.Check if you run itEPSS 0.49%Aug 21, 2026
- Critical9.9Incus is a system container and virtual machine manager.Check if you run itEPSS 0.44%Aug 21, 2026
- Critical9.3Headroom's LLM proxy derives the memory owner from the x-headroom-user-id request header.Check if you run itEPSS 0.61%Aug 21, 2026
- High7.7Headroom's LLM proxy lets a client choose the upstream destination with the x-headroom-base-url request header.Check if you run itEPSS 0.59%Aug 21, 2026
- Critical9.8In Spring AI's tool calling support, the per-request tool list is advertised to the model as a boundary but is not fully enforced when a tool call is dispatched.Check if you run itEPSS 0.25%Aug 21, 2026
- Critical9.8SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026.Patch nowKEVEPSS 4.48%Aug 21, 2026
- High7.5A flaw was found in FreeIPA.Check if you run itEPSS 0.54%Aug 20, 2026
- High7.5A flaw was found in FreeIPA.Check if you run itEPSS 0.54%Aug 20, 2026
- Medium5.7Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because same_origin_path accepts a backslash or tab in the return parameter.Open the advisoryAug 20, 2026
- Critical9.3MLflow Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 9.84%Aug 17, 2026
- Unknown[20260802] - Core - Improper CORS origin validationCheck if you run itEPSS 0.34%Aug 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio_queue ENOMEM in writeback by adding a mempool Fix the handling of folio_queue allo…Check if you run itEPSS 0.21%Aug 15, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: fix deadlock in read error recovery path raid1d and raid10d may resubmit a split m…Check if you run itEPSS 0.21%Aug 15, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: md/raid1: fix writes_pending and barrier reference leaks on write failures raid1_make_request() acq…Check if you run itEPSS 0.47%Aug 15, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: md/raid10: fix writes_pending leak on write request failures raid10_make_request() acquires a write…Check if you run itEPSS 0.21%Aug 15, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: xen/pvcalls: bound backend response req_id before indexing rsp[] pvcalls_front_event_handler() take…Check if you run itEPSS 0.38%Aug 15, 2026
- Critical9.3In the Linux kernel, the following vulnerability has been resolved: net/liquidio: drop cached VF pci_dev LUT The PF SR-IOV enable path caches VF pci_dev pointers in dp…Check if you run itEPSS 0.19%Aug 15, 2026