Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web.Check if you run itEPSS 0.52%Oct 13, 2026
- High7.5Dio: Cross-origin redirect leaks sensitive request headers inCheck if you run itEPSS 0.36%Oct 13, 2026
- High7.1An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disc…Check if you run itEPSS 0.47%Oct 13, 2026
- Medium6.5ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.Check if you run itEPSS 0.26%Oct 13, 2026
- Medium5.5For XSA-308 logic was introduced, as VMX VMEntry checks do not like the exact combination of state which occurs when #DB in intercepted, Single Stepping is active, and…Check if you run itEPSS 0.17%Oct 13, 2026
- High8.8XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain other grant table operations.Check if you run itEPSS 0.18%Oct 13, 2026
- Critical9.8The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later re-worked to better integrate with other manipulations of the same MSR.Check if you run itEPSS 0.16%Oct 13, 2026
- Medium5.5A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5.Check if you run itEPSS 0.51%Oct 13, 2026
- Medium5.3Plane is an open-source project management tool.Check if you run itEPSS 0.24%Oct 13, 2026
- High7.5[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) addressed…Check if you run itEPSS 0.15%Oct 13, 2026
- Medium4.7With its original introduction, GNTTAB_cache_flush was made available uniformly.Check if you run itEPSS 0.18%Oct 13, 2026
- High7.5[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) addressed…Check if you run itEPSS 0.15%Oct 13, 2026
- Medium6.9Axios is a promise-based HTTP client for the browser and Node.js.Check if you run itEPSS 0.53%Oct 13, 2026
- Medium6.1ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the PageTitle/Notes parameter in the Notes.aspx endpoint.Check if you run itEPSS 0.19%Oct 13, 2026
- Critical9.8ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints.Check if you run itEPSS 0.35%Oct 13, 2026
- High8.8Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC MethodsCheck if you run itEPSS 0.33%Oct 13, 2026
- High7.1Collection validators using collation-accepting expressions can crash MongoDB Server on insertCheck if you run itEPSS 0.24%Oct 13, 2026
- Critical9.9Legacy Update is a tool for activating and installing updates on legacy Windows PCs.Check if you run itEPSS 0.21%Oct 13, 2026
- Medium4.2JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clickedCheck if you run itEPSS 0.14%Oct 13, 2026
- High8.6CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.Check if you run itEPSS 0.49%Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.43%Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.43%Oct 13, 2026
- High7.5Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over TCP closes the connection and another packet (retransmit or malicio…Check if you run itEPSS 0.45%Oct 13, 2026
- High7.5Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate authentication.Check if you run itEPSS 0.34%Oct 13, 2026
- High8.7MediaAgent contained a heap-based buffer overflow issue affecting service availability.Check if you run itEPSS 0.32%Oct 13, 2026