Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1As dhclient is building an environment to pass to dhclient-script, it may need to resize the array of string pointers.Check if you run itEPSS 1.81%Apr 30, 2026
- High8.1The BOOTP file field is written to the lease file without escaping embedded double-quotes, allowing injection of arbitrary dhclient.conf directives.Check if you run itEPSS 0.40%Apr 30, 2026
- Critical9.1Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting.Check if you run itEPSS 0.52%Apr 29, 2026
- High8.5Allok AVI to DVD SVCD VCD Converter 4.0.1217 contains a structured exception handling (SEH) based buffer overflow vulnerability that allows local attackers to execute…Check if you run itEPSS 0.16%Apr 29, 2026
- High7.5pgjdbc is an open source postgresql JDBC Driver.Check if you run itEPSS 3.26%Apr 29, 2026
- Medium6.8Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Windows systems.Check if you run itEPSS 0.15%Apr 29, 2026
- Low3.1Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.Check if you run itEPSS 0.24%Apr 29, 2026
- High8.7This vulnerability exists in e-Sushrut due to disclosure of sensitive information and hardcoded AES encryption keys in client-side JavaScript.Check if you run itEPSS 0.33%Apr 29, 2026
- High8.8This vulnerability exists in e-Sushrut due to improper authentication logic that relies on client-side response parameters to determine authentication status.Check if you run itEPSS 0.77%Apr 29, 2026
- High7.7OpenClaw before 2026.3.31 contains an incomplete scope-clearing vulnerability in trusted-proxy authentication mode that allows operator.admin privilege escalation.Check if you run itEPSS 0.64%Apr 28, 2026
- High8.7OpenClaw before 2026.3.28 accepts unbounded concurrent unauthenticated WebSocket upgrades without pre-authentication budget allocation.Check if you run itEPSS 0.58%Apr 28, 2026
- High8.5OpenClaw before 2026.3.24 contains an environment variable injection vulnerability in the CLI backend runner that allows attackers to inject malicious environment vari…Check if you run itEPSS 0.21%Apr 28, 2026
- Medium6.3NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection component, where an attacker could cause a server-side request forgery by supplyi…Check if you run itEPSS 0.13%Apr 28, 2026
- High8.4Multiple BinSoft products perform client-side authentication.Check if you run itEPSS 0.19%Apr 28, 2026
- High8.9A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 3.25%Apr 28, 2026
- Medium4.8Due to improper TLS certificate validation in the DeskTime Time Tracking App before version 1.3.674, attackers who can position themselves in the network path between…Check if you run itEPSS 0.18%Apr 28, 2026
- Medium5.5A vulnerability has been found in jackwrichards FastlyMCP up to 6f3d0b0e654fc51076badc7fa16c03c461f95620.Check if you run itEPSS 2.06%Apr 28, 2026
- Medium6.2The RTSP service of MERCURY IP camera MIPC252W 1.0.5 Build 230306 has an issue handling failed Digest authentication attempts.Check if you run itEPSS 0.20%Apr 27, 2026
- Medium5.3pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules names.Check if you run itEPSS 0.17%Apr 27, 2026
- Medium6.5Improper Handling of TLS Client Authentication Failure Leading to Anonymous Principal Assignment in Apache Storm Versions Affected: up to 2.8.7 Description: When TLS t…Check if you run itEPSS 0.45%Apr 27, 2026
- Medium4.8Improper Certificate Validation via Global SSL Context Downgrade in Apache Storm Prometheus Reporter Versions Affected: from 2.6.3 to 2.8.6 Description: In production…Check if you run itEPSS 0.28%Apr 27, 2026
- High8.7Allocation of Resources Without Limits or Throttling vulnerability in elixir-plug plug_cowboy allows unauthenticated remote denial of service via atom table exhaustion.Check if you run itEPSS 0.78%Apr 27, 2026
- High7.4A vulnerability has been found in Tenda F456 1.0.0.5.Check if you run itEPSS 1.01%Apr 27, 2026
- High7.4A security vulnerability has been detected in Tenda F456 1.0.0.5.Check if you run itEPSS 1.01%Apr 27, 2026
- Medium5.5A vulnerability has been found in 666ghj MiroFish up to 0.1.2.Check if you run itEPSS 2.06%Apr 26, 2026