Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.0ConnectWise ScreenConnect Improper Verification of Cryptographic SignaturePatch nowKEVEPSS 0.29%Mar 17, 2026
- High7.4FastMCP is the standard framework for building MCP applications.Check if you run itEPSS 0.37%Mar 16, 2026
- Critical9.1Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms.Check if you run itEPSS 0.31%Mar 16, 2026
- Medium6.8Improper Protection of Alternate Path exists in the no-access and workdir feature of the AWS API MCP Server versions >= 0.2.14 and < 1.3.9 on all platforms may allow t…Check if you run itEPSS 0.19%Mar 16, 2026
- Medium5.5A security vulnerability has been detected in D-Link DIR-823G 1.0.2B05.Check if you run itEPSS 1.90%Mar 16, 2026
- Low1.9A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25.Check if you run itEPSS 0.35%Mar 16, 2026
- Medium4.7telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via NEW_ENVIRON SEND USERVAR.Check if you run itEPSS 0.28%Mar 16, 2026
- Medium6.9Cleanuparr is a tool for automating the cleanup of unwanted or blocked files in Sonarr, Radarr, and supported download clients like qBittorrent.Check if you run itEPSS 0.46%Mar 16, 2026
- High8.6Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.50%Mar 16, 2026
- High8.1cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.26%Mar 16, 2026
- Critical9.9Apollo Federation is an architecture for declaratively composing APIs into a unified graph.Check if you run itEPSS 0.62%Mar 16, 2026
- High8.2xmlseclibs is a library written in PHP for working with XML Encryption and Signatures.Check if you run itEPSS 0.17%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to sanitize client-supplied post metadata which allows an authenticated attacker to sp…Check if you run itEPSS 0.11%Mar 16, 2026
- Medium5.7Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 Mattermost fails to limit the size of responses from integration action endpoints, which al…Check if you run itEPSS 0.17%Mar 16, 2026
- Medium5.3Mumble before 1.6.870 is prone to an out-of-bounds array access, which may result in denial of service (client crash).Check if you run itEPSS 0.29%Mar 16, 2026
- High7.5Raytha CMS allows an attacker to spoof or headers to attacker controlled domain.Check if you run itEPSS 0.15%Mar 16, 2026
- High8.8A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the file at lines 161-167.Check if you run itEPSS 1.48%Mar 16, 2026
- Medium6.8ZKTeco ZKBioSecurity 3.0 contains a local authorization bypass vulnerability in visLogin.jsp that allows attackers to authenticate without valid credentials by spoofin…Check if you run itEPSS 0.15%Mar 16, 2026
- High8.8RealtyScript 4.0.2 Multiple Time-based Blind SQL InjectionCheck if you run itEPSS 0.42%Mar 15, 2026
- High8.8RealtyScript 4.0.2 SQL Injection via u_id and agent ParametersCheck if you run itEPSS 0.43%Mar 15, 2026
- Medium5.1RealtyScript 4.0.2 Stored Cross-Site Scripting via text Parameter in pages.phpCheck if you run itEPSS 0.21%Mar 15, 2026
- Medium5.1Next Click Ventures RealtyScript 4.0.2 contains a stored cross-site scripting vulnerability in the location_name parameter of the admin locations interface.Check if you run itEPSS 0.33%Mar 15, 2026
- Medium6.9RealtyScript 4.0.2 Cross-Site Request Forgery Unauthorized User CreationCheck if you run itEPSS 0.20%Mar 15, 2026
- Medium5.1RealtyScript 4.0.2 Stored Cross-Site Scripting via CSV File Upload FilenameCheck if you run itEPSS 0.24%Mar 15, 2026
- Medium5.1Next Click Ventures RealtyScript 4.0.2 fails to properly sanitize file uploads, allowing attackers to store malicious scripts through the file POST parameter in admin/tools.php.Check if you run itEPSS 0.27%Mar 15, 2026