Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.30%May 4, 2026
- High7.5@fastify/accepts-serializer cached serializer-selection results keyed by the request Accept header without a size limit or eviction policy.Check if you run itEPSS 0.28%May 4, 2026
- High7.5fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions.Check if you run itEPSS 0.63%May 4, 2026
- High8.3WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains a stack-based buffer overflow vulnerability in the firewall.cgi and makeRequest.cgi binaries that allow…Check if you run itEPSS 0.40%May 4, 2026
- Critical9.3WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the firewall.cgi binary across five request handlers that appl…Check if you run itEPSS 1.23%May 4, 2026
- Critical9.3WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the adm.cgi binary's reboot_time function that allows unauthen…Check if you run itEPSS 4.00%May 4, 2026
- Critical9.3WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the makeRequest.cgi binary that allows unauthenticated remote…Check if you run itEPSS 3.20%May 4, 2026
- Critical9.3WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the internet.cgi binary that allows unauthenticated remote att…Check if you run itEPSS 3.09%May 4, 2026
- Critical9.3WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the wireless.cgi binary that allows unauthenticated remote att…Check if you run itEPSS 4.98%May 4, 2026
- High8.1IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to act as other users.Check if you run itEPSS 0.24%May 4, 2026
- High7.5Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text afte…Check if you run itEPSS 0.51%May 4, 2026
- Medium5.3n8n is an open source workflow automation platform.Check if you run itEPSS 0.25%May 4, 2026
- High8.7n8n is an open source workflow automation platform.Check if you run itEPSS 0.49%May 4, 2026
- High8.8n8n is an open source workflow automation platform.Check if you run itEPSS 0.33%May 4, 2026
- High7.1n8n is an open source workflow automation platform.Check if you run itEPSS 0.38%May 4, 2026
- Medium5.3n8n is an open source workflow automation platform.Check if you run itEPSS 0.33%May 4, 2026
- Critical9.4n8n is an open source workflow automation platform.Check if you run itEPSS 0.48%May 4, 2026
- Critical9.4n8n is an open source workflow automation platform.Check if you run itEPSS 0.85%May 4, 2026
- Medium5.1n8n is an open source workflow automation platform.Check if you run itEPSS 0.18%May 4, 2026
- Medium5.3n8n is an open source workflow automation platform.Check if you run itEPSS 0.34%May 4, 2026
- Medium6.3n8n is an open source workflow automation platform.Check if you run itEPSS 0.38%May 4, 2026
- Medium6.0n8n is an open source workflow automation platform.Check if you run itEPSS 0.20%May 4, 2026
- High7.1n8n is an open source workflow automation platform.Check if you run itEPSS 0.26%May 4, 2026
- High7.5Prometheus is an open-source monitoring system and time series database.Check if you run itEPSS 0.35%May 4, 2026
- Medium4.8Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications.Check if you run itEPSS 0.12%May 4, 2026
Sort