Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.9KEDA is a Kubernetes-based Event Driven Autoscaling component.Check if you run itEPSS 0.64%Oct 14, 2026
- High7.5The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP).Check if you run itEPSS 0.46%Oct 14, 2026
- Medium6.3Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenti…Check if you run itEPSS 0.36%Oct 14, 2026
- High8.7A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthent…Check if you run itEPSS 0.37%Oct 14, 2026
- High8.5An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control of the device.Check if you run itEPSS 0.66%Oct 14, 2026
- High8.7A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to cause a denial of service…Check if you run itEPSS 0.37%Oct 14, 2026
- High8.7A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS and Junos OS Evolved platforms allows an adjacent unauthenticated attack…Check if you run itEPSS 0.34%Oct 14, 2026
- High8.8Junos OS: SRX Series: An authenticated remote-access VPN client causes iked denial of service or root-level code execution when JIMS identity publishing is enabledCheck if you run itEPSS 0.59%Oct 14, 2026
- Medium6.0RabbitMQ is a messaging and streaming broker.Check if you run itEPSS 0.54%Oct 14, 2026
- High7.1libsmb2 through 6.2 contains an integer underflow vulnerability in decode_acl that allows malicious SMB servers to trigger heap out-of-bounds reads via crafted securit…Check if you run itEPSS 0.55%Oct 14, 2026
- High7.1libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2_decode_file_fs_volume_info and smb2_decode_file_fs_attribute_info that allows malicious SM…Check if you run itEPSS 0.47%Oct 14, 2026
- High7.1libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2_decode_file_all_info that allows malicious SMB servers to crash clients by sending an unchecked FileNamCheck if you run itEPSS 0.45%Oct 14, 2026
- Low3.1miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseelt function's namespace-prefix handling that skips an end-of-buffer check aftCheck if you run itEPSS 0.29%Oct 14, 2026
- Low2.3miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseatt function that allows malicious UPnP gateways to read past buffer bounds viCheck if you run itEPSS 0.29%Oct 14, 2026
- Medium6.33proxy from 0.9.7 through 1.0.1, fixed in commit 206c923, contains an uninitialized stack memory disclosure vulnerability that allows unauthenticated attackers to leak…Check if you run itEPSS 0.36%Oct 14, 2026
- High8.2Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.69%Oct 14, 2026
- Critical9.2Junos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is usedCheck if you run itEPSS 0.46%Oct 14, 2026
- High8.3Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key file directives to automatically rCheck if you run itEPSS 0.18%Oct 14, 2026
- Medium6.5Gitea's initial GitLab migration version probe uses an HTTP client without a timeout and does not attach the migration task's cancellation context.Check if you run itEPSS 0.29%Oct 14, 2026
- Medium6.5Gitea's OneDev migration downloader reads the entire remote version response into memory without a size limit and uses a client without a timeout.Check if you run itEPSS 0.55%Oct 14, 2026
- Low3.5Gitea's Jupyter notebook renderer inserts the notebook's language_info.name metadata into a CSS class attribute while disabling sanitization and rendering directly in…Check if you run itEPSS 0.37%Oct 14, 2026
- Low2.1ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/index.php that allows attackers to inject HTML via the val param…Check if you run itEPSS 0.36%Oct 14, 2026
- Medium5.1ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/language_settings.php via the unencoded edit_language GET parameter.Check if you run itEPSS 0.35%Oct 14, 2026
- Medium5.1ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/flagged_item.php via the unencoded type GET parameter.Check if you run itEPSS 0.39%Oct 14, 2026
- Medium6.8libschrift through 0.10.2 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a font with unitsPerEm of 0 in the head table.Check if you run itEPSS 0.20%Oct 14, 2026