Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.48%Mar 30, 2026
- High7.1Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.59%Mar 30, 2026
- Medium6.9Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.55%Mar 30, 2026
- High8.7ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies.Check if you run itEPSS 0.15%Mar 26, 2026
- High7.8NVIDIA Model Optimizer for Windows and Linux contains a vulnerability in the ONNX quantization feature, where a user could cause unsafe deserialization by providing a…Check if you run itEPSS 0.21%Mar 24, 2026
- High8.5NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to trigger a buffer over-read or over-write to t…Check if you run itEPSS 0.34%Mar 24, 2026
- Medium5.3NGINX Plus and NGINX Open Source have a vulnerability in the ngx_stream_ssl_module module due to the improper handling of revoked certificates when configured with the…Check if you run itEPSS 0.15%Mar 24, 2026
- Medium6.3NGINX Plus and NGINX Open Source have a vulnerability in the ngx_mail_smtp_module module due to the improper handling of CRLF sequences in DNS responses.Check if you run itEPSS 0.26%Mar 24, 2026
- High8.5The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to over-read or over-write NGINX wo…Check if you run itEPSS 1.03%Mar 24, 2026
- High8.8ZDI-26-578: NGINX HTTP Dav Module Alias Directive Integer Underflow Remote Code Execution VulnerabilityCheck this weekEPSS 25.07%Mar 24, 2026
- High8.7When the ngx_mail_auth_http_module module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause worker processes to terminate.Check if you run itEPSS 0.94%Mar 24, 2026
- High8.5A hardcoded cryptographic key within the configuration mechanism on TP-Link Archer NX200, NX210, NX500 and NX600 enables decryption and re-encryption of device configuration data.Check if you run itEPSS 0.13%Mar 23, 2026
- High8.5Improper input handling in a modem-management administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of…Check if you run itEPSS 0.62%Mar 23, 2026
- High8.5Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of…Check if you run itEPSS 0.62%Mar 23, 2026
- High8.6A missing authentication check in the HTTP server on TP-Link Archer NX200, NX210, NX500 and NX600 to certain cgi endpoints allows unauthenticated access intended for a…Check if you run itEPSS 2.97%Mar 23, 2026
- High7.5VU#948176: Multiple TLS Libraries can Bypass Delegation EnforcementCheck if you run itEPSS 0.46%Mar 19, 2026
- Low1.2An integer overflow vulnerability existed in the static function wolfssl_add_to_chain, that caused heap corruption when certificate data was written out of bounds of a…Check if you run itEPSS 0.09%Mar 19, 2026
- High8.8A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx.Check if you run itEPSS 0.63%Mar 19, 2026
- High8.6Kan is an open-source project management tool.Patch nowKEVEPSS 1.74%Mar 19, 2026
- Critical9.1Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.Check if you run itEPSS 0.32%Mar 18, 2026
- High8.8Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Check if you run itEPSS 3.13%Mar 18, 2026
- High7.0Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in Erlang OTP (inets httpd module) allows HTTP Request Smuggling.Check if you run itEPSS 0.47%Mar 13, 2026
- High8.8A security issue was discovered in ingress-nginx where the Ingress annotation can be used to inject configuration into nginx.Check if you run itEPSS 0.74%Mar 9, 2026
- Low1.9A weakness has been identified in Qi-ANXIN QAX Virus Removal up to 2025-10-22.Check if you run itEPSS 0.18%Mar 9, 2026
- Critical9.8Nginx UI is a web user interface for the Nginx web server.Patch nowKEVEPSS 1.01%Mar 5, 2026