Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings.Check if you run itEPSS 1.08%Apr 28, 2026
- Medium4.8Due to improper TLS certificate validation in the DeskTime Time Tracking App before version 1.3.674, attackers who can position themselves in the network path between…Check if you run itEPSS 0.18%Apr 28, 2026
- High8.7Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, l…Check if you run itEPSS 0.19%Apr 28, 2026
- High8.5Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests conta…Check if you run itEPSS 0.26%Apr 28, 2026
- Medium5.3Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in certain requests, causing a service disruption.Check if you run itEPSS 0.24%Apr 28, 2026
- Medium5.5A weakness has been identified in BrowserOperator browser-operator-core up to 0.6.0.Check if you run itEPSS 0.59%Apr 28, 2026
- Medium5.5A vulnerability was identified in BigSweetPotatoStudio HyperChat up to 2.0.0-alpha.63.Check if you run itEPSS 0.47%Apr 28, 2026
- Medium5.5A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0.Check if you run itEPSS 0.51%Apr 28, 2026
- Medium5.5A weakness has been identified in dvladimirov MCP up to 0.1.0.Check if you run itEPSS 2.06%Apr 28, 2026
- Medium5.5A weakness has been identified in ChatGPTNextWeb NextChat up to 2.16.1.Check if you run itEPSS 0.60%Apr 27, 2026
- Medium5.5A security flaw has been discovered in ChatGPTNextWeb NextChat up to 2.16.1.Check if you run itEPSS 0.60%Apr 27, 2026
- Medium5.5A vulnerability has been found in dmitryglhf mcp-url-downloader up to 4b8cf2de55f6e8864a77d108e8a94a5b8e4394c6.Check if you run itEPSS 0.47%Apr 27, 2026
- Low2.1A vulnerability was found in dh1011 auto-favicon up to f189116a9259950c2393f114dbcb94dde0ad864b.Check if you run itEPSS 0.35%Apr 27, 2026
- Medium5.5A vulnerability was detected in JoeCastrom mcp-chat-studio up to 1.5.0.Check if you run itEPSS 0.47%Apr 27, 2026
- Critical9.8MERCURY MIPC252W IP camera 1.0.5 Build 230306 Rel.79931n contains an improper authentication vulnerability in the RTSP service.Check if you run itEPSS 0.65%Apr 27, 2026
- Medium6.2The RTSP service of MERCURY IP camera MIPC252W 1.0.5 Build 230306 has an issue handling failed Digest authentication attempts.Check if you run itEPSS 0.20%Apr 27, 2026
- Medium4.4A handling issue in the RTSP service of the Mercury MIPC252W 1.0.5 Build 230306 Rel.79931n allows an authenticated attacker to trigger session termination by repeatedl…Check if you run itEPSS 0.16%Apr 27, 2026
- High7.5A null pointer dereference vulnerability exists in the RTSP service of the MERCURY MIPC252W 1.0.5 Build 230306 Rel.79931n.Check if you run itEPSS 0.49%Apr 27, 2026
- Medium5.5A security vulnerability has been detected in AlejandroArciniegas mcp-data-vis up to de5a51525a69822290eaee569a1ab447b490746d.Check if you run itEPSS 0.51%Apr 27, 2026
- Low2.9A vulnerability was found in vLLM up to 0.19.0.Check if you run itEPSS 0.48%Apr 27, 2026
- High8.8Cross Site Request Forgery vulnerability in diskoverdata diskover-community v.2.3.5.Check if you run itEPSS 0.24%Apr 27, 2026
- High7.5An issue in the /store/items/search endpoint of Agent Protocol server commit e9a89f allows attackers to cause a Denial of Service (DoS) via a crafted POST request.Check if you run itEPSS 0.49%Apr 27, 2026
- High8.7Allocation of Resources Without Limits or Throttling vulnerability in elixir-plug plug_cowboy allows unauthenticated remote denial of service via atom table exhaustion.Check if you run itEPSS 0.78%Apr 27, 2026
- Low2.9A vulnerability was found in NousResearch hermes-agent 0.8.0.Check if you run itEPSS 0.58%Apr 27, 2026
- Critical10.0Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Apache Camel Camel-Coap component.Check if you run itEPSS 7.16%Apr 27, 2026