Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5A Regular-Expression Denial of Service (ReDoS) in the Markdown2.Check if you run itEPSS 0.15%Oct 15, 2026
- High7.1Document Gallery <= 5.1.1 - Reflected XSS via data-shortcode AttributePatch nowKEVEPSS 0.15%Oct 15, 2026
- Medium6.5Python Social Auth is a social authentication/registration mechanism.Check if you run itEPSS 0.15%Oct 15, 2026
- UnknownA stack overflow in the gensub_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service (DoS) via supplying a crafted .PSB subtitle file.Check if you run itEPSS 0.17%Oct 15, 2026
- High7.5An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the administrative configuration interface.Check if you run itEPSS 0.34%Oct 15, 2026
- High7.5react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP.Check if you run itEPSS 0.43%Oct 15, 2026
- Critical9.8AUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi.Check if you run itEPSS 0.76%Oct 15, 2026
- Medium6.5tinytag is a Python library for reading audio file metadata.Check if you run itEPSS 0.25%Oct 15, 2026
- High8.7AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework.Check if you run itEPSS 0.37%Oct 15, 2026
- High8.1Improper AuthenticationPatch nowKEVEPSS 0.43%Oct 15, 2026
- Critical9.3The vulnerability exists within internal components of BeyondTrust’s Remote Support product.Patch nowKEVEPSS 1.18%Oct 15, 2026
- Medium6.9Nuxt OG Image generates OG Images with Vue templates in Nuxt.Check if you run itEPSS 0.19%Oct 15, 2026
- High7.5OpenNext Cloudflare is an open Next.js adapter for Cloudflare.Check if you run itEPSS 0.30%Oct 15, 2026
- High7.5kin-openapi is a Go project for handling OpenAPI files.Check if you run itEPSS 0.43%Oct 15, 2026
- High7.5kin-openapi is a Go project for handling OpenAPI files.Check if you run itEPSS 0.34%Oct 15, 2026
- High7.5kin-openapi is a Go project for handling OpenAPI files.Check if you run itEPSS 0.43%Oct 15, 2026
- High7.4kin-openapi is a Go project for handling OpenAPI files.Check if you run itEPSS 0.49%Oct 15, 2026
- Medium5.3kin-openapi is a Go project for handling OpenAPI files.Check if you run itEPSS 0.45%Oct 15, 2026
- Medium5.3kin-openapi is a Go project for handling OpenAPI files.Check if you run itEPSS 0.37%Oct 15, 2026
- Medium5.3kin-openapi is a Go project for handling OpenAPI files.Check if you run itEPSS 0.52%Oct 15, 2026
- Medium5.3A security vulnerability has been detected in sgl-project SGLang up to 0.5.19.Check if you run itEPSS 0.32%Oct 14, 2026
- High7.7n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation tool, whose interpreter evaluates caller-supplie…Check if you run itEPSS 0.31%Oct 14, 2026
- Medium6.1n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying…Check if you run itEPSS 0.28%Oct 14, 2026
- High7.0n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1 of the Microsoft SQL node, which substitutes Query field expression val…Check if you run itEPSS 0.29%Oct 14, 2026
- High7.1FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of-bounds write in winpr_convert_from_jpeg because grayscale JPEG buffers…Check if you run itEPSS 0.22%Oct 14, 2026