Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113 whose /debug/manifest handler returns the full agent manifest, includi…Open the advisoryOct 17, 2026
- Medium5.9undici is an HTTP client library for Node.js.Check if you run itEPSS 0.25%Oct 15, 2026
- High8.7SODOLA SL902-SWTGW124AS Buffer Overflow DoS via Multipart Boundary ParserCheck if you run itEPSS 0.39%Oct 15, 2026
- High7.5react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP.Check if you run itEPSS 0.43%Oct 15, 2026
- High8.7AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework.Check if you run itEPSS 0.37%Oct 15, 2026
- UnknownImportant: libsoup3 security updateOpen the advisoryOct 15, 2026
- UnknownCVE-2026-79768 is listed by USN-8931-1: Apache HTTP Server vulnerabilities.Check if you run itEPSS 0.59%Oct 14, 2026
- UnknownCVE-2026-73637 is listed by USN-8931-1: Apache HTTP Server vulnerabilities.Check if you run itEPSS 0.48%Oct 14, 2026
- UnknownCVE-2026-73636 is listed by USN-8931-1: Apache HTTP Server vulnerabilities.Check if you run itEPSS 0.41%Oct 14, 2026
- High7.5The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP).Check if you run itEPSS 0.46%Oct 14, 2026
- High8.6SmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP server that allows unauthenticated network attackers to invoke remote-control APIs.Check if you run itEPSS 0.39%Oct 14, 2026
- Critical9.9IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the system due to improper data s…Check if you run itEPSS 0.52%Oct 13, 2026
- Medium5.3A flaw was found in openstack-network-exporter.Check if you run itEPSS 0.31%Oct 12, 2026
- UnknownCVE-2026-94439 affecting package golang 1.27.1-1Open the advisoryOct 8, 2026
- UnknownHTTP/1 server connection desynchronization after 2xx CONNECT response in net/httpCheck if you run itEPSS 0.32%Oct 8, 2026
- UnknownHTTP/2 server memory exhaustion due to Trailer headers in net/httpCheck if you run itEPSS 0.57%Oct 8, 2026
- High8.8Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a dirCheck if you run itEPSS 0.44%Oct 1, 2026
- High7.5Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi and a crafted uwsgi respCheck if you run itEPSS 0.50%Oct 1, 2026
- High7.5A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of seCheck if you run itEPSS 0.48%Oct 1, 2026
- High7.5Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of serviceCheck if you run itEPSS 0.88%Oct 1, 2026
- High7.5Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configuratiCheck if you run itEPSS 0.47%Oct 1, 2026
- Critical9.8Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions.Check if you run itEPSS 0.52%Oct 1, 2026
- Medium5.3Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebCheck if you run itEPSS 0.53%Oct 1, 2026
- High7.5Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_html with crafted HTTP response bodies.Check if you run itEPSS 0.61%Oct 1, 2026
- High7.5Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite.Check if you run itEPSS 0.50%Oct 1, 2026
146 records · page 1 of 6
PreviousNext