Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3An HTTP Request Smuggling vulnerability (CWE-444) has been found in Pingora's parsing of HTTP/1.0 and Transfer-Encoding requests.Check if you run itEPSS 0.79%Mar 5, 2026
- Critical9.3An HTTP request smuggling vulnerability (CWE-444) was found in Pingora's handling of HTTP/1.1 connection upgrades.Check if you run itEPSS 0.67%Mar 5, 2026
- Medium5.4Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.26%Mar 4, 2026
- Critical9.8Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.59%Mar 4, 2026
- Medium6.3Open OnDemand is an open-source high-performance computing portal.Check if you run itEPSS 0.61%Mar 4, 2026
- Critical9.3pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3 contain an authentication bypass vulnerability in JwtAuthenticator when processing encrypted JWTs that allows remot…Check if you run itEPSS 6.17%Mar 4, 2026
- Medium5.4Vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs.Check if you run itEPSS 0.19%Mar 4, 2026
- Medium6.0Vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs.Check if you run itEPSS 0.29%Mar 4, 2026
- High8.5Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes.Check if you run itEPSS 0.35%Mar 4, 2026
- Medium5.3NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.Check if you run itEPSS 0.26%Mar 4, 2026
- Low3.4Dark Reader is an accessibility browser extension that makes web pages colors dark.Check if you run itEPSS 0.13%Mar 4, 2026
- High8.6The XWiki blog application allows users of the XWiki platform to create and manage blog posts.Check if you run itEPSS 0.44%Mar 4, 2026
- High7.7A Server-Side Request Forgery (SSRF) vulnerability was identified in the @opennextjs/cloudflare package, resulting from a path normalization bypass in the /cdn-cgi/ima…Check if you run itEPSS 0.40%Mar 4, 2026
- High7.5A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusRead…Check if you run itEPSS 1.00%Mar 4, 2026
- High7.8Dell Device Management Agent (DDMA), versions prior to 26.02, contain an Incorrect Authorization vulnerability.Check if you run itEPSS 0.11%Mar 4, 2026
- Medium6.1A vulnerability in Cisco Webex could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack.Check if you run itEPSS 0.28%Mar 4, 2026
- Medium6.1A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow…Check if you run itEPSS 0.31%Mar 4, 2026
- Medium6.1A vulnerability in the VPN web services component of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) So…Check if you run itEPSS 0.30%Mar 4, 2026
- Medium4.3A vulnerability in the VPN web services component of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) So…Check if you run itEPSS 0.32%Mar 4, 2026
- Medium5.8Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detec…Check if you run itEPSS 0.41%Mar 4, 2026
- High7.2A vulnerability in the CLI of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software in multiple context mode could allow an authenticated, local attacker wi…Check if you run itEPSS 0.14%Mar 4, 2026
- Medium5.8A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS…Check if you run itEPSS 0.35%Mar 4, 2026
- High7.7A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, remote attacker with valid VPN u…Check if you run itEPSS 0.34%Mar 4, 2026
- Medium5.8A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS…Check if you run itEPSS 0.35%Mar 4, 2026
- Medium4.9A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.Check if you run itEPSS 0.33%Mar 4, 2026
Sort