Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.0Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents.Check if you run itEPSS 0.51%Aug 21, 2026
- High7.5Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations.Check if you run itEPSS 0.62%Aug 21, 2026
- High8.5UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the user substitution logic within parse_artifact.sh where use…Check if you run itEPSS 1.17%Aug 21, 2026
- High8.5UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _command_collector function where foreach command output l…Check if you run itEPSS 1.14%Aug 21, 2026
- High8.5UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _run_command function that allows attackers to execute arb…Check if you run itEPSS 1.03%Aug 21, 2026
- Medium6.9Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autocall Fire Administrator may allow an attcker to R…Check if you run itEPSS 0.08%Aug 21, 2026
- High7.1A stack-based out-of-bounds write vulnerability exists in the login request handling functionality of the administrative web interface of TP-Link TL-MR6400 v7 routers.Check if you run itEPSS 0.27%Aug 21, 2026
- High7.1A NULL pointer dereference vulnerability exists in the HTTP request parsing functionality of TL-MR6400 v7.Check if you run itEPSS 0.47%Aug 21, 2026
- High8.5A stack-based buffer overflow vulnerability exists in the firmware update functionality of TL-MR6400 v7 due to unsafe processing of attacker-controlled metadata within…Check if you run itEPSS 0.29%Aug 21, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_route: fix fastmap use-after-free on filter The route4 classifier maintains a 16-slo…Check if you run itEPSS 0.12%Aug 21, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hard_header_len in non-ring send paths packet_snd() reads dev->hard_header_l…Check if you run itEPSS 0.12%Aug 21, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: net: ipv6: clear suppressed fib6 rule result fib6_rule_suppress() drops a suppressed route with ip6…Check if you run itEPSS 0.42%Aug 21, 2026
- High8.8CVE-2026-74580 (V-GHOST) – Affected Proxmox VE VersionsCheck if you run itEPSS 0.24%Aug 21, 2026
- High8.5Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page's scripts and styles option.Check if you run itEPSS 0.42%Aug 21, 2026
- Critical9.2Jet Admin allows an attacker to create a malicious app and connect it to a target user's custom domain, edit the authentication configuration, and reroute traffic to t…Check if you run itEPSS 0.57%Aug 21, 2026
- Medium6.9The Brushfire platform's video content streaming application (https://online.brushfire.com) exposes database path in requests to users, allowing a remote, unauthentica…Check if you run itEPSS 0.53%Aug 21, 2026
- Critical10.0Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.80%Aug 21, 2026
- High7.5mod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality.Check if you run itEPSS 0.49%Aug 21, 2026
- Medium6.8In ONNX before 1.21.0, the 'save_external_data' function builds the external-data file path from the model's external_data location field and opens it for writing with…Check if you run itEPSS 0.16%Aug 21, 2026
- High8.3OpenViking before 0.3.4 contains a server-side request forgery vulnerability that allows authenticated low-privilege attackers to access internal network services by s…Check if you run itEPSS 0.34%Aug 21, 2026
- High8.7to_abs_path in scripts/iib/tool.py normalised the requested path with os.path.normpath, which collapses dot segments but does not resolve symbolic links.Check if you run itEPSS 0.51%Aug 21, 2026
- High8.7is_path_trusted in scripts/iib/api.py compares the requested path against each allowed parent directory with path.startswith(parent_path), without appending a path separator.Check if you run itEPSS 0.50%Aug 21, 2026
- Critical9.4DJI drones transmit DUML (DJI Universal Markup Language) protocol messages over BLE (Bluetooth Low Energy) without encryption.Check if you run itEPSS 0.09%Aug 21, 2026
- Critical9.4Paperclip before 0.3.1 in default local_trusted mode fails to validate Host headers, allowing attackers to execute arbitrary commands via DNS rebinding.Check if you run itEPSS 0.49%Aug 21, 2026
- Critical9.9Incus is a system container and virtual machine manager.Check if you run itEPSS 0.48%Aug 21, 2026
Sort