Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Node.js: Node.js: Denial of Service due to crafted HTTP headerCheck this weekEPSS 25.04%Mar 30, 2026
- High7.2PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 3.44%Mar 26, 2026
- Medium6.1PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 0.76%Mar 26, 2026
- Medium6.5PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 0.44%Mar 26, 2026
- Medium4.3PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 0.38%Mar 26, 2026
- Medium5.5PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 0.37%Mar 26, 2026
- High8.5Vulnerability related to an unquoted service path in Small HTTP Server 3.06.36, specifically affecting the executable located at 'C:\Program Files (x86)\shttps_mg\http…Check if you run itEPSS 0.15%Mar 26, 2026
- High8.7Problem in the Small HTTP Server v3.06.36 service.Check if you run itEPSS 0.61%Mar 26, 2026
- High7.7A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote attacker to cause an affecte…Check if you run itEPSS 0.28%Mar 25, 2026
- High7.5NVIDIA Triton Inference Server Sagemaker HTTP server contains a vulnerability where an attacker may cause an exception.Check if you run itEPSS 0.32%Mar 24, 2026
- High8.6A missing authentication check in the HTTP server on TP-Link Archer NX200, NX210, NX500 and NX600 to certain cgi endpoints allows unauthenticated access intended for a…Check if you run itEPSS 2.97%Mar 23, 2026
- High7.5NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.Check if you run itEPSS 1.52%Mar 20, 2026
- High8.8mcp-memory-service is an open-source memory backend for multi-agent systems.Check if you run itEPSS 0.48%Mar 20, 2026
- Low3.7PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 0.33%Mar 20, 2026
- High8.6Improper Restriction of XML External Entity Reference vulnerability in XMLUtils.java in Slovensko.Digital Autogram allows remote unauthenticated attacker to conduct SS…Check if you run itEPSS 0.53%Mar 19, 2026
- High8.4Tina is a headless content management system.Check if you run itEPSS 0.22%Mar 12, 2026
- High7.5PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 0.46%Mar 7, 2026
- Medium5.3mcp-memory-service is an open-source memory backend for multi-agent systems.Check if you run itEPSS 0.43%Mar 7, 2026
- Medium6.9Spin is an open source developer tool for building and running serverless applications powered by WebAssembly.Check if you run itEPSS 0.41%Feb 26, 2026
- Medium6.9Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.24%Feb 24, 2026
- High7.5Astro is a web framework.Check if you run itEPSS 0.80%Feb 24, 2026
- Medium6.5Ray is an AI compute engine.Check if you run itEPSS 0.41%Feb 21, 2026
- Critical9.3SmarterTools SmarterMail Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 88.18%Jan 23, 2026
- Critical10.0Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control VulnerabilityPatch nowKEVEPSS 73.19%Jan 20, 2026
- Critical9.6A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications.Check if you run itEPSS 1.33%Jan 7, 2026