Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.5RealTerm Serial Terminal 2.0.0.70 contains a structured exception handling (SEH) buffer overflow vulnerability in the Echo Port tab that allows local attackers to exec…Check if you run itEPSS 0.31%Apr 5, 2026
- Medium6.8a-Mac Address Change 5.4 contains a local buffer overflow vulnerability that allows local attackers to crash the application by supplying oversized input to registrati…Check if you run itEPSS 0.14%Apr 5, 2026
- Medium6.8AnyBurn 4.3 x86 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string to the image co…Check if you run itEPSS 0.19%Apr 5, 2026
- Medium6.8IP TOOLS 2.50 contains a local buffer overflow vulnerability in the SNMP Scanner component that allows local attackers to crash the application by supplying oversized input.Check if you run itEPSS 0.20%Apr 5, 2026
- Medium6.4The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Pricing Widget's 'onClick Event' setting in all…Check if you run itEPSS 0.19%Apr 4, 2026
- High7.2Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF BypassCheck if you run itEPSS 0.34%Apr 4, 2026
- High7.5Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.27%Apr 4, 2026
- Critical9.1PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.52%Apr 3, 2026
- High7.7PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.35%Apr 3, 2026
- Critical9.8PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.99%Apr 3, 2026
- Medium6.1OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Check if you run itEPSS 0.34%Apr 3, 2026
- Medium6.5OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Check if you run itEPSS 0.42%Apr 3, 2026
- Medium5.1JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks.Check if you run itEPSS 0.30%Apr 3, 2026
- High8.6prompts.chat prior to commit 0f8d4c3 contains a path traversal vulnerability in skill file handling that allows attackers to write arbitrary files to the client system…Check if you run itEPSS 0.36%Apr 3, 2026
- Critical9.8Fortinet FortiClient EMS Improper Access Control VulnerabilityPatch nowKEVEPSS 9.10%Apr 3, 2026
- Critical9.8In mlflow/mlflow, the FastAPI job endpoints under are not protected by authentication or authorization when the app is enabled.Check if you run itEPSS 4.39%Apr 3, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache The NFSv4.0 replay cache uses a fixed 112-byte…Check if you run itEPSS 1.20%Apr 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations ieee80211_chan_bw_change() ite…Check if you run itEPSS 0.16%Apr 3, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: smb: client: fix krb5 mount with username option Customer reported that some of their krb5 mounts w…Check if you run itEPSS 0.18%Apr 3, 2026
- High8.2FastMCP is the standard framework for building MCP applications.Check if you run itEPSS 0.30%Apr 3, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: net: ti: icssg-prueth: Fix memory leak in XDP_DROP for non-zero-copy mode Page recycling was remove…Check if you run itEPSS 0.34%Apr 3, 2026
- High7.8FastMCP is the standard framework for building MCP applications.Check if you run itEPSS 0.73%Apr 3, 2026
- Medium4.8Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Public Folder Client Permissions report.Check if you run itEPSS 1.03%Apr 3, 2026
- High7.5The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials.Check if you run itEPSS 0.27%Apr 2, 2026
- Medium6.1XSS vulnerability in cveInterface.js allows for inject HTML to be passed to display, as cveInterface trusts input from CVE API servicesCheck if you run itEPSS 0.25%Apr 2, 2026