Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.0Nanobot prior to version 0.2.1 contains a server-side request forgery vulnerability in the Microsoft Teams channel handler that allows remote attackers to exfiltrate B…Check if you run itEPSS 0.66%Jun 1, 2026
- Medium5.3Nanobot prior to version 0.2.1 contains a server-side request forgery vulnerability in the web_fetch tool that allows remote attackers to reach internal or private net…Check if you run itEPSS 0.49%Jun 1, 2026
- High8.2FlexRIC v2.0.0 allows a single SCTP connection to bind multiple xapp_ids by sending multiple E42_SETUP_REQUESTs.Check if you run itEPSS 0.53%Jun 1, 2026
- Medium5.5A vulnerability was determined in SourceCodester SEO Meta Tag Extractor 1.0.Check if you run itEPSS 0.29%Jun 1, 2026
- High8.5IBM WebSphere Application Server 9.0, and 8.5 is affected by an improper validation of user-supplied data during deserialization using the SAML Web Single Sign-On component.Check if you run itEPSS 0.68%Jun 1, 2026
- High8.8IBM i Access Family 1.1.5.0 through 1.1.9.12 IBM i Access Client Solutions (ACS) is vulnerable to remote code execution when configured to listen for requests from IBM i Navigator.Check if you run itEPSS 0.81%Jun 1, 2026
- High7.1Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.49%Jun 1, 2026
- Medium4.3Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.36%Jun 1, 2026
- High8.1Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.50%Jun 1, 2026
- Low3.3Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.17%Jun 1, 2026
- High7.8A flaw was found in rrdcached, a component of rrdtool.Check if you run itEPSS 0.18%Jun 1, 2026
- High8.2CodexBar prior to 0.32.0 contains a session cookie leakage vulnerability that allows network attackers to intercept imported browser session cookies by exploiting impr…Check if you run itEPSS 0.30%Jun 1, 2026
- Medium6.5Under infinite recursion in the routing layer, request-handling can cause OOM error.Check if you run itEPSS 0.28%Jun 1, 2026
- High7.5FlexRIC v2.0.0 trusts the xapp_id field from E42 message payloads without binding it to the sender's SCTP association.Check if you run itEPSS 0.57%Jun 1, 2026
- High7.5FlexRIC v2.0.0 contains an authorization bypass in the iApp's xApp isolation mechanism.Check if you run itEPSS 0.57%Jun 1, 2026
- High8.6An issue was discovered in OpenAirInterface5G 2.4.0 (nr-softmodem) in the E2SM-KPM RAN Function's PRB utilization metric calculation.Check if you run itEPSS 0.58%Jun 1, 2026
- High7.5FlexRIC v2.0.0 uses a uint16_t counter for xapp_id assignment but stores the value in uint32_t message fields.Check if you run itEPSS 0.61%Jun 1, 2026
- High7.5FlexRIC v2.0.0 crashes when the iApp receives an E42_RIC_SUBSCRIPTION_REQUEST referencing a non-existent E2 Node.Check if you run itEPSS 0.64%Jun 1, 2026
- Low2.7Capsule is a multi-tenancy and policy-based framework for Kubernetes.Check if you run itEPSS 0.25%Jun 1, 2026
- Medium5.5A security flaw has been discovered in horizon921 mcpilot 0.1.0.Check if you run itEPSS 0.30%Jun 1, 2026
- Low2.1A vulnerability was identified in hiraishikentaro wezterm-mcp 0.1.0.Check if you run itEPSS 1.09%Jun 1, 2026
- Low2.1A vulnerability has been found in hekmon8 Jenkins-server-mcp 0.1.0.Check if you run itEPSS 0.27%Jun 1, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authori…Check if you run itEPSS 0.38%Jun 1, 2026
- Medium6.5Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.51%Jun 1, 2026
- Critical10.0CloudPirates Open Source Helm Charts is a collection of Helm charts.Check if you run itEPSS 0.44%Jun 1, 2026