Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.7Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Check if you run itEPSS 0.49%Apr 20, 2026
- High8.6Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.39%Apr 20, 2026
- High8.8In OpenXiangShan NEMU, when Smstateen is enabled, clearing mstateen0.ENVCFG does not correctly restrict access to henvcfg and senvcfg.Check if you run itEPSS 0.54%Apr 20, 2026
- Medium6.5In OpenXiangShan NEMU, insufficient Smstateen permission enforcement allows lower-privileged code to access IMSIC state via stopei/vstopei CSRs even when mstateen0.IMS…Check if you run itEPSS 0.40%Apr 20, 2026
- Critical9.8In OpenXiangShan NEMU prior to 55295c4, when running with RVH (Hypervisor extension) enabled, a VS-mode guest write to the supervisor interrupt-enable CSR (sie) may be…Check if you run itEPSS 0.68%Apr 20, 2026
- High7.5NEMU (OpenXiangShan/NEMU) before v2025.12.r2 contains an improper instruction-validation flaw in its RISC-V Vector (RVV) decoder.Check if you run itEPSS 0.74%Apr 20, 2026
- Critical9.0Postiz is an AI social media scheduling tool.Check if you run itEPSS 0.26%Apr 18, 2026
- High8.8Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigger sensitive operations.Check if you run itEPSS 0.15%Apr 17, 2026
- Critical9.1OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers.Check if you run itEPSS 0.66%Apr 14, 2026
- Medium5.3Rembg is a tool to remove images background.Check if you run itEPSS 0.59%Apr 10, 2026
- High8.6wolfSSL_X509_verify_cert in the OpenSSL compatibility layer accepts a certificate chain in which the leaf's signature is not checked, if the attacker supplies an untru…Check if you run itEPSS 0.22%Apr 10, 2026
- Medium6.8Siklu EtherHaul 8010 siklu-uimage-nxp-enc-10_6_2-18707-ea552dc00b devices have a static root password.Check if you run itEPSS 0.13%Apr 8, 2026
- High8.6OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.Check if you run itEPSS 0.57%Apr 6, 2026
- Critical9.3topsecgroup tianxin_internet_behavior_management_system Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.17%Apr 6, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: bnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handler The ASYNC_EVENT_CMPL_EVENT_ID_DBG_B…Check if you run itEPSS 0.16%Apr 3, 2026
- Critical9.2OneUptime is an open-source monitoring and observability platform.Check if you run itEPSS 0.67%Apr 2, 2026
- High7.5Rack is a modular Ruby web server interface.Check if you run itEPSS 0.40%Apr 2, 2026
- Medium5.5Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.Check if you run itEPSS 0.19%Apr 1, 2026
- Medium5.5Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.Check if you run itEPSS 0.17%Apr 1, 2026
- High8.6Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.Check if you run itEPSS 0.51%Apr 1, 2026
- High8.7Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.Check if you run itEPSS 0.62%Apr 1, 2026
- Critical9.8wenxian is a tool to generate BIBTEX files from given identifiers (DOI, PMID, arXiv ID, or paper title).Check if you run itEPSS 2.78%Mar 31, 2026
- Critical9.4Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.21%Mar 30, 2026
- Critical9.8Nginx UI is a web user interface for the Nginx web server.Patch nowKEVEPSS 2.52%Mar 30, 2026
- Critical9.9Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.38%Mar 30, 2026