Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.3An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6.Check if you run itEPSS 0.43%Jun 3, 2026
- High8.6Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 88.20%Jun 3, 2026
- Medium5.3Impact: The morgan logging middleware's :remote-user token extracts the Basic auth username from the Authorization request header and writes it to the log stream witho…Check if you run itEPSS 0.41%Jun 3, 2026
- Low2.3In Vinyl Cache before 9.0.1 and Varnish Cache before 9.0.3, a deficiency in HTTP/2 request parsing can be exploited to launch a backend request desync attack (request…Check if you run itEPSS 0.47%Jun 3, 2026
- High7.5ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages.Check if you run itEPSS 0.50%Jun 3, 2026
- Low2.3A flaw has been found in dask up to 3.0.Check if you run itEPSS 0.29%Jun 3, 2026
- Low2.1A security vulnerability has been detected in EIPStackGroup OpENer up to 2.3.0.Check if you run itEPSS 0.24%Jun 3, 2026
- Medium4.3The EmergencyWP – Dead Man's switch & legacy deliverance plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.2.Check if you run itEPSS 0.19%Jun 3, 2026
- Low2.1A vulnerability was identified in wonderwhy-er DesktopCommanderMCP 0.2.37.Check if you run itEPSS 0.22%Jun 3, 2026
- High8.1DD-WRT Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 4.00%Jun 3, 2026
- Critical9.6LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.Check if you run itEPSS 0.41%Jun 2, 2026
- High7.1LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.Check if you run itEPSS 0.34%Jun 2, 2026
- Low2.1A vulnerability was found in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b.Check if you run itEPSS 0.23%Jun 2, 2026
- High8.7BrowserStack Runner through 0.9.5 contains a remote code execution vulnerability in the /_log HTTP handler that allows unauthenticated network-adjacent attackers to ex…Check if you run itEPSS 0.80%Jun 2, 2026
- Critical9.8The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 7.3.1.Check if you run itEPSS 0.48%Jun 2, 2026
- Medium6.3Medplum before 5.1.14 contains a server-side request forgery vulnerability in the subscription worker that allows authenticated users to perform unauthorized internal…Check if you run itEPSS 0.37%Jun 2, 2026
- High8.2Allocation of Resources Without Limits or Throttling vulnerability in elixir-tesla tesla allows denial of service via atom table exhaustion in Tesla.Adapter.Mint.Check if you run itEPSS 0.63%Jun 2, 2026
- Low2.1Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in elixir-tesla tesla allows HTTP header injection via Tesl…Check if you run itEPSS 0.35%Jun 2, 2026
- High8.2Improper Handling of Case Sensitivity vulnerability in elixir-tesla tesla allows credential leakage to a third-party origin on cross-origin redirects.Check if you run itEPSS 0.67%Jun 2, 2026
- Medium6.6AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Check if you run itEPSS 0.21%Jun 2, 2026
- High7.5React Router is a router for React.Check if you run itEPSS 0.46%Jun 2, 2026
- High8.1React Router is a router for React.Check if you run itEPSS 0.62%Jun 2, 2026
- High8.2Proxy server in Graph Explorer before 3.0.1 falls back to HTTP when certificate files are missing, which might allow remote threat actors to obtain sensitive informati…Check if you run itEPSS 0.10%Jun 2, 2026
- High7.1Dräger Infinity M300 patient worn monitors with software version VG2.3.1 and earlier contain a network-based denial of service vulnerability that allows network-adjace…Check if you run itEPSS 0.19%Jun 2, 2026
- Medium6.9NamelessMC is website software for Minecraft servers.Check if you run itEPSS 0.44%Jun 2, 2026