Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.4A vulnerability was found in Tenda 4G06 04.06.01.29.Check if you run itEPSS 0.94%Mar 29, 2026
- Critical9.8GRID::Machine versions through 0.127 for Perl allows arbitrary code execution via unsafe deserialization.Check if you run itEPSS 0.78%Mar 29, 2026
- High8.6zFTP Client 20061220+dfsg3-4.1 contains a buffer overflow vulnerability in the NAME parameter handling of FTP connections that allows local attackers to crash the appl…Check if you run itEPSS 0.15%Mar 28, 2026
- Critical9.6Notesnook is a note-taking app.Check if you run itEPSS 0.69%Mar 27, 2026
- High8.2MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients.Check if you run itEPSS 0.54%Mar 27, 2026
- High8.2Handlebars provides the power necessary to let users build semantic templates.Check if you run itEPSS 0.22%Mar 27, 2026
- High7.5Forge (also called ) is a native implementation of Transport Layer Security in JavaScript.Check if you run itEPSS 0.90%Mar 27, 2026
- Critical9.3Gematik Authenticator securely authenticates users for login to digital health applications.Check if you run itEPSS 0.47%Mar 27, 2026
- High8.9nanobot is a personal AI assistant.Check if you run itEPSS 0.72%Mar 27, 2026
- Medium5.4WWBN AVideo is an open source video platform.Check if you run itEPSS 0.27%Mar 27, 2026
- Medium6.9Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability th…Check if you run itEPSS 0.50%Mar 27, 2026
- Medium6.9Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability th…Check if you run itEPSS 0.54%Mar 27, 2026
- Medium5.1A reflected Cross-Site Scripting (XSS) vulnerability has been discovered in Clickedu.Check if you run itEPSS 0.44%Mar 27, 2026
- High8.3OpenBao is an open source identity-based secrets management system.Check if you run itEPSS 0.61%Mar 27, 2026
- High7.5Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory usage.Check if you run itEPSS 0.80%Mar 27, 2026
- High7.4cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.35%Mar 27, 2026
- Critical9.3dd-trace-java is a Datadog APM client for Java.Check if you run itEPSS 0.99%Mar 27, 2026
- High8.8Incus is a system container and virtual machine manager.Check if you run itEPSS 0.48%Mar 27, 2026
- Medium6.3Cocos AI is a confidential computing system for AI.Check if you run itEPSS 0.07%Mar 27, 2026
- High8.8Sharp is a content management framework built for Laravel as a package.Check if you run itEPSS 0.69%Mar 26, 2026
- Medium5.4Kestra is an open-source, event-driven orchestration platform Versions up to and including 1.3.3 render user-supplied flow YAML metadata fields — description, inputs[]…Check if you run itEPSS 0.34%Mar 26, 2026
- Medium4.2Improper Handling of Case Sensitivity vulnerability in Drupal OpenID Connect / OAuth client allows Privilege Escalation.This issue affects OpenID Connect / OAuth clien…Check if you run itEPSS 0.21%Mar 26, 2026
- Medium6.5Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect / OAuth client allows Authentication Bypass.This issue affects OpenID C…Check if you run itEPSS 0.42%Mar 26, 2026
- Medium4.3Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenID Connect / OAuth client allows Server Side Request Forgery.This issue affects OpenID Connect / OAuth c…Check if you run itEPSS 0.27%Mar 26, 2026
- Medium4.3iCalendar is a Ruby library for dealing with iCalendar files in the iCalendar format defined by RFC-5545.Check if you run itEPSS 0.37%Mar 26, 2026