Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.78%May 29, 2026
- Critical10.0Incorrect permission settings on a critical resource in Suprema BioStar 2 (versions 2.9.3 through 2.9.11) that allow backup files to be publicly exposed when the admin…Check if you run itEPSS 0.55%May 29, 2026
- High7.5CORS misconfiguration in the REST API of Network Optix Nx Witness VMS before version 6.1.2, when running in the default Standard security mode, on Linux and Windows al…Check if you run itEPSS 0.24%May 29, 2026
- Critical9.3Nx Console Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 1.34%May 27, 2026
- Medium5.3IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files…Check if you run itEPSS 0.17%May 26, 2026
- Critical9.2NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.Check if you run itEPSS 2.70%May 22, 2026
- Medium6.8A vulnerability in the Border Gateway Protocol (BGP) enforce-first-as feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX…Check if you run itEPSS 0.47%May 20, 2026
- Critical9.2NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-controlled NGINX variable (for example, $http_*, $arg_*,…Check if you run itEPSS 0.79%May 19, 2026
- High8.8Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash.Check if you run itEPSS 0.13%May 16, 2026
- Medium6.9Fleet is open source device management software.Check if you run itEPSS 0.39%May 14, 2026
- High8.3A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that may result in excessive memory allocation or an over-read of data.Check if you run itEPSS 0.93%May 13, 2026
- Critical9.2NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.Patch nowKEVEPSS 3.40%May 13, 2026
- Medium6.3NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module.Check if you run itEPSS 0.73%May 13, 2026
- Medium6.3When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame…Check if you run itEPSS 0.34%May 13, 2026
- Medium6.3NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssl_module module when the ssl_verify_client directive is set to "on" or "optional," and the ssl_…Check if you run itEPSS 0.69%May 13, 2026
- Medium6.9When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof their source IP address allowing for bypass of auth…Check if you run itEPSS 0.38%May 13, 2026
- Medium5.6NXP moal.ko Wi-Fi driver 5.1.7.10 FW version from v17.92.1.p149.43 To v17.92.1.p149.157 was discovered to contain a buffer overflow via the mod_para parameter in the w…Check if you run itEPSS 0.18%May 13, 2026
- High8.7Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in mtrudel bandit allows unauthenticated remote denial of service via worker process exhaustion.Check if you run itEPSS 0.94%May 13, 2026
- Critical9.9Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.39%May 12, 2026
- High8.2ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx.Check if you run itEPSS 0.49%May 12, 2026
- Critical9.2SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the public space that is limited to certain nginx configurations, allowing attackers to…Check if you run itEPSS 0.73%May 12, 2026
- Medium5.9A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions), blueplanet 105 TL3 (All versions < V3.92), bluepla…Check if you run itEPSS 0.25%May 12, 2026
- High7.2A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 105 TL3 (All versions < V3.9…Check if you run itEPSS 0.19%May 12, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort on file creation due to name hash collision If we attempt to create se…Check if you run itEPSS 0.16%May 8, 2026
- Critical10.0OpenLearnX is an open-source, decentralized learning and assessment platform.Check if you run itEPSS 1.13%May 8, 2026