Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A vulnerability was found in douinc mkdocs-mcp-plugin up to 0.4.1.Check if you run itEPSS 0.43%Apr 27, 2026
- High8.6Improper use of the static-eval npm package in the open source solution qnabot-on-aws versions 7.2.4 and earlier may allow an authenticated administrator to execute ar…Check if you run itEPSS 0.43%Apr 27, 2026
- Medium5.5A vulnerability has been found in dmitryglhf mcp-url-downloader up to 4b8cf2de55f6e8864a77d108e8a94a5b8e4394c6.Check if you run itEPSS 0.29%Apr 27, 2026
- Medium5.5A flaw has been found in disler aider-mcp-server up to b2516fa466d0d851932da92ee6d0e66946db9efc.Check if you run itEPSS 1.47%Apr 27, 2026
- High8.9A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 1.79%Apr 27, 2026
- High8.9A security vulnerability has been detected in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 1.77%Apr 27, 2026
- High8.9A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 1.79%Apr 27, 2026
- Medium4.8An authenticated attacker with permission to edit document content can store crafted HTML/JavaScript in a Document embed editable and cause script execution when the p…Check if you run itEPSS 0.19%Apr 27, 2026
- Medium6.0If is given a ZIP archive with an absolute Windows path containing a drive ( ) then the archive will be extracted outside the target directory which is different than…Check if you run itEPSS 0.55%Apr 27, 2026
- Medium6.1A reflected cross-site scripting (XSS) vulnerability exists in WebFileSys version before 2.32.0 and fixed in v.2.32.0.Check if you run itEPSS 0.30%Apr 27, 2026
- Critical9.4NASA Earth Observing System Data and Information System (EOSDIS) MODAPS v8.1 was discovered to contain a SQL injection vulnerability in the category parameterCheck if you run itEPSS 0.33%Apr 27, 2026
- High8.9A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 1.77%Apr 27, 2026
- High8.9A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 1.77%Apr 27, 2026
- High7.4A vulnerability was determined in Tenda HG3 2.0.Check if you run itEPSS 0.63%Apr 27, 2026
- High8.8The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 5.4.1.Check if you run itEPSS 0.29%Apr 27, 2026
- High7.0An authenticated administrative user who can import or save DataObject class definitions can inject attacker-controlled composite index metadata and trigger unintended…Check if you run itEPSS 0.43%Apr 27, 2026
- Low2.1A vulnerability was found in dh1011 auto-favicon up to f189116a9259950c2393f114dbcb94dde0ad864b.Check if you run itEPSS 0.20%Apr 27, 2026
- Medium5.5A vulnerability has been found in dexhunter kaggle-mcp up to 406127ffcb2b91b8c10e20e6c2ca787fbc1dc92d.Check if you run itEPSS 0.41%Apr 27, 2026
- Low2.1A flaw has been found in CodeAstro Online Classroom 1.0.Check if you run itEPSS 0.24%Apr 27, 2026
- Medium5.5A vulnerability was detected in JoeCastrom mcp-chat-studio up to 1.5.0.Check if you run itEPSS 0.28%Apr 27, 2026
- Medium6.8When configured to use an SSL bundle, Spring Boot's Elasticsearch auto-configuration does not perform hostname verification when connecting to the Elasticsearch server.Check if you run itEPSS 0.14%Apr 27, 2026
- Critical9.8MERCURY MIPC252W IP camera 1.0.5 Build 230306 Rel.79931n contains an improper authentication vulnerability in the RTSP service.Check if you run itEPSS 0.49%Apr 27, 2026
- Medium6.2The RTSP service of MERCURY IP camera MIPC252W 1.0.5 Build 230306 has an issue handling failed Digest authentication attempts.Check if you run itEPSS 0.18%Apr 27, 2026
- Medium4.4A handling issue in the RTSP service of the Mercury MIPC252W 1.0.5 Build 230306 Rel.79931n allows an authenticated attacker to trigger session termination by repeatedl…Check if you run itEPSS 0.25%Apr 27, 2026
- High7.8Dell Alienware Command Center (AWCC), versions prior to 6.13.8.0, contain a Least Privilege Violation vulnerability.Check if you run itEPSS 0.10%Apr 27, 2026
Sort