Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2LlamaFarm through 0.0.34 contains an insecure default configuration that binds its unauthenticated FastAPI server to 0.0.0.0 on port 14345, while the lf CLI silently d…Check if you run itEPSS 0.24%Oct 11, 2026
- Critical9.2Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configurat…Check if you run itEPSS 0.31%May 15, 2026
- High8.8gopls by default communicates via pipe.Check if you run itEPSS 0.35%May 6, 2026
- Critical9.8A vulnerability in Apache IoTDB.Check if you run itEPSS 0.59%Mar 9, 2026
- Medium6.3OpenClaw version 2026.1.14-1 prior to 2026.2.12 contains an improper network binding vulnerability in the Chrome extension (must be installed and enabled) relay server…Check if you run itEPSS 0.74%Mar 5, 2026
- Medium6.8A vulnerability exists in Keycloak's server distribution where enabling debug mode (--debug ) insecurely defaults to binding the Java Debug Wire Protocol (JDWP) port t…Open the advisoryNov 13, 2025
6 records · page 1 of 1
PreviousNext