Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Symantec Data Loss Prevention Windows Endpoint, prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15, may be susceptible to a Elevation of P…Check if you run itEPSS 0.20%Mar 30, 2026
- Low1.9A vulnerability was detected in raine consult-llm-mcp up to 2.5.3.Check if you run itEPSS 0.93%Mar 30, 2026
- High7.5The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character…Check if you run itEPSS 0.39%Mar 30, 2026
- Critical9.8Nginx UI is a web user interface for the Nginx web server.Patch nowKEVEPSS 35.27%Mar 30, 2026
- Critical9.9Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.29%Mar 30, 2026
- High7.5OpenAirInterface V2.2.0 AMF crashes when it fails to decode the message.Check if you run itEPSS 0.28%Mar 30, 2026
- High8.2A cross-session information disclosure vulnerability exists in the awesome-llm-apps project in commit e46690f99c3f08be80a9877fab52acacf7ab8251 (2026-01-19).Check if you run itEPSS 0.26%Mar 30, 2026
- Medium6.8OpenSC is an open source smart card tools and middleware.Check if you run itEPSS 0.29%Mar 30, 2026
- Medium5.3MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module.Check if you run itEPSS 0.45%Mar 30, 2026
- Medium5.1Smoothwall Express versions prior to 3.1 Update 13 contain a reflected cross-site scripting vulnerability in the /redirect.cgi endpoint due to improper sanitation of t…Check if you run itEPSS 0.16%Mar 30, 2026
- Medium5.1Smoothwall Express versions prior to 3.1 Update 13 contain a stored cross-site scripting vulnerability in the /cgi-bin/vpnmain.cgi script due to improper sanitation of…Check if you run itEPSS 0.14%Mar 30, 2026
- Medium6.3A weakness has been identified in osrg GoBGP up to 4.3.0.Check if you run itEPSS 0.43%Mar 30, 2026
- Critical9.3A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.33%Mar 30, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.26%Mar 30, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.26%Mar 30, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.28%Mar 30, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.26%Mar 30, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.26%Mar 30, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.26%Mar 30, 2026
- Critical9.8CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation.Check if you run itEPSS 0.76%Mar 30, 2026
- Critical9.8CrewAI contains a server-side request forgery vulnerability that enables content acquisition from internal and cloud services, facilitated by the RAG search tools not…Check if you run itEPSS 0.51%Mar 30, 2026
- High7.5CrewAI contains a arbitrary local file read vulnerability in the JSON loader tool that reads files without path validation, enabling access to files on the server.Check if you run itEPSS 0.63%Mar 30, 2026
- Critical9.6The CrewAI CodeInterpreter tool falls back to SandboxPython when it cannot reach Docker, which can enable RCE through arbitrary C function calling.Check if you run itEPSS 0.46%Mar 30, 2026
- Medium6.5DDSN Interactive cm3 Acora CMS version 10.7.1 contains an improper access control vulnerability.Check if you run itEPSS 0.31%Mar 30, 2026
- Medium6.5A flaw in Node.js URL processing causes an assertion failure in native code when is called with a malformed internationalized domain name (IDN) containing invalid char…Check if you run itEPSS 0.33%Mar 30, 2026
Sort