Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3LangChain is a framework for building agents and LLM-powered applications.Check if you run itEPSS 0.26%Apr 9, 2026
- Low3.1Beszel is a server monitoring platform.Check if you run itEPSS 0.22%Apr 9, 2026
- High7.1flatpak-builder is a tool to build flatpaks from source.Check if you run itEPSS 0.29%Apr 9, 2026
- High8.1Apollo MCP Server is a Model Context Protocol server that exposes GraphQL operations as MCP tools.Check if you run itEPSS 0.18%Apr 9, 2026
- High8.7OpenPLC_V3 REST API endpoint checks for JWT presence but never verifies the caller's role.Check if you run itEPSS 0.24%Apr 9, 2026
- High7.8HDF5 is software for managing data.Check if you run itEPSS 0.19%Apr 9, 2026
- Medium6.5CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled and FFM is used in Apache Tomcat.Check if you run itEPSS 0.45%Apr 9, 2026
- High7.5Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clustering component of Apache Tomcat exposed the Kubernetes bearer token.Check if you run itEPSS 0.45%Apr 9, 2026
- High7.5Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve component of Apache Tomcat.Check if you run itEPSS 0.46%Apr 9, 2026
- Medium5.3Improper Input Validation vulnerability in Apache Tomcat due to an incomplete fix of CVE-2025-66614.Check if you run itEPSS 0.31%Apr 9, 2026
- High7.8The pstrip64.sys driver in EnTech Taiwan PowerStrip <=3.90.736 allows local users to escalate privileges to SYSTEM via a crafted IOCTL request enabling unprivileged us…Check if you run itEPSS 0.14%Apr 9, 2026
- High7.5Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration.Check if you run itEPSS 8.85%Apr 9, 2026
- Critical9.1CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native.Check if you run itEPSS 0.71%Apr 9, 2026
- High7.5Configured cipher preference order not preserved vulnerability in Apache Tomcat.Check if you run itEPSS 0.26%Apr 9, 2026
- Medium6.1Occasional URL redirection to untrusted Site ('Open Redirect') vulnerability in Apache Tomcat via the LoadBalancerDrainingValve.Check if you run itEPSS 0.53%Apr 9, 2026
- High7.5Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat via invalid chunk extension.Check if you run itEPSS 0.70%Apr 9, 2026
- Critical9.3An attacker could use data obtained by sniffing the network traffic to forge packets in order to make arbitrary requests to Contemporary Controls BASC 20T.Check if you run itEPSS 0.44%Apr 9, 2026
- Critical9.1V2Board 1.6.1 through 1.7.4 and Xboard through 0.1.9 expose authentication tokens in HTTP response bodies of the loginWithMailLink endpoint when the login_with_mail_li…Check if you run itEPSS 0.60%Apr 9, 2026
- Critical9.2OpenPLC_V3 is vulnerable to a Plaintext Storage of a Password vulnerability that could allow an attacker to retrieve credentials and access sensitive information.Check if you run itEPSS 0.30%Apr 9, 2026
- Medium6.1Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.22%Apr 9, 2026
- Medium6.1Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.21%Apr 9, 2026
- Low2.3Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.29%Apr 9, 2026
- Critical9.0Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.28%Apr 9, 2026
- Low1.0Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.12%Apr 9, 2026
- Critical9.0Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.32%Apr 9, 2026
Sort