Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Beghelli Sicuro24 SicuroWeb contains a template injection vulnerability that allows attackers to inject arbitrary AngularJS expressions by exploiting improper renderin…Check if you run itEPSS 0.38%Mar 13, 2026
- Critical10.0The Honeywell IQ4x building management controller, exposes its full web-based HMI without authentication in its factory-default configuration.Check if you run itEPSS 1.03%Mar 12, 2026
- Medium6.5Tinyauth is an authentication and authorization server.Check if you run itEPSS 0.35%Mar 12, 2026
- High8.5A command injection vulnerability has been identified in the Telnet command-line interface (CLI) of TP-Link TL-MR6400 v5.3.Check if you run itEPSS 2.88%Mar 12, 2026
- Medium4.8Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF.Check if you run itEPSS 0.15%Mar 12, 2026
- High8.8GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a SQL injection vulnerability via the add_group() function.Check if you run itEPSS 0.68%Mar 12, 2026
- High8.7Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an authentication bypass vulnerability in the login.php administration panel that allows unauthenticated attackers t…Check if you run itEPSS 1.13%Mar 12, 2026
- High8.8Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer VulnerabilityPatch nowKEVEPSS 1.07%Mar 12, 2026
- High8.1OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.50%Mar 11, 2026
- Medium4.7ha-mcp is a Home Assistant MCP Server.Check if you run itEPSS 0.25%Mar 11, 2026
- Medium5.1Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.34%Mar 11, 2026
- High7.8Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.Check if you run itEPSS 0.19%Mar 11, 2026
- Medium5.3Quill provides simple mac binary signing and notarization from any platform.Check if you run itEPSS 0.13%Mar 11, 2026
- Critical10.0Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.Check if you run itEPSS 0.76%Mar 11, 2026
- Critical9.8RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things (IoT) devices and other embedded devices.Check if you run itEPSS 0.62%Mar 11, 2026
- Critical9.8Runtipi is a personal homeserver orchestrator.Check if you run itEPSS 0.69%Mar 11, 2026
- High8.6Comtrend AR-5310 GE31-412SSG-C01_R10.A2pG039u.d24k contains a restricted shell escape vulnerability that allows local users to bypass command restrictions by using the…Check if you run itEPSS 0.13%Mar 11, 2026
- Critical9.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.57%Mar 11, 2026
- High7.5flagd is a feature flag daemon with a Unix philosophy.Check if you run itEPSS 0.60%Mar 11, 2026
- Critical9.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.57%Mar 11, 2026
- High8.1OPNsense is a FreeBSD based firewall and routing platform.Check if you run itEPSS 0.20%Mar 11, 2026
- Medium6.8A vulnerability in the handling of an Egress Packet Network Interface (EPNI) Aligner interrupt in Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500…Check if you run itEPSS 0.33%Mar 11, 2026
- High8.8A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating syst…Check if you run itEPSS 0.18%Mar 11, 2026
- Medium6.5libcurl can in some circumstances reuse the wrong connection when asked to do an Negotiate-authenticated HTTP or HTTPS request.Check if you run itEPSS 0.26%Mar 11, 2026
- Medium5.4The Happy Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.21.0 via the admin action…Check if you run itEPSS 0.33%Mar 11, 2026