Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5An attacker might be able to trigger a use-after-free by sending crafted DNS queries to a DNSdist using the DNSQuestion:getEDNSOptions method in custom Lua code.Check if you run itEPSS 1.34%Mar 31, 2026
- High7.5An attacker might be able to trigger an out-of-bounds write by sending crafted DNS responses to a DNSdist using the DNSQuestion:changeName or DNSResponse:changeName me…Check if you run itEPSS 1.50%Mar 31, 2026
- High8.7Prompt injection vulnerability in 1millionbot Millie chatbot that occurs when a user manages to evade chat restrictions using Boolean prompt injection techniques (form…Check if you run itEPSS 0.45%Mar 31, 2026
- Critical9.3SQL inyection (SQLi) vulnerability in Umami Software web application through an improperly sanitized parameter, which could allow an authenticated attacker to execute…Check if you run itEPSS 0.40%Mar 31, 2026
- Medium5.8The Performance Monitor WordPress plugin through 1.0.6 does not validate a parameter before making a request to it, which could allow unauthenticated users to perform SSRF attacksCheck if you run itEPSS 0.32%Mar 31, 2026
- Medium5.0OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF).Check if you run itEPSS 0.44%Mar 31, 2026
- Medium6.1The Auto Post Scheduler plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.84.Check if you run itEPSS 0.20%Mar 31, 2026
- High8.1Moby is an open source container framework.Check if you run itEPSS 0.51%Mar 31, 2026
- Medium6.5SciTokens is a reference library for generating and using SciTokens.Check if you run itEPSS 0.53%Mar 31, 2026
- Unknownrocketsoftware trufusion_enterprise Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.28%Mar 31, 2026
- Unknownthimpress learnpress Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.05%Mar 31, 2026
- High7.5NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.Check if you run itEPSS 0.56%Mar 30, 2026
- Medium5.3Tautulli is a Python based monitoring and tracking tool for Plex Media Server.Check if you run itEPSS 0.38%Mar 30, 2026
- Medium5.9A flaw in V8's string hashing mechanism causes integer-like strings to be hashed to their numeric value, making hash collisions trivially predictable.Check if you run itEPSS 0.27%Mar 30, 2026
- High7.5Node.js: Node.js: Denial of Service due to crafted HTTP headerCheck this weekEPSS 25.04%Mar 30, 2026
- High7.7Invoice Ninja v5.12.46 and v5.12.48 is vulnerable to Server-Side Request Forgery (SSRF) in CheckDatabaseRequest.php.Check if you run itEPSS 0.37%Mar 30, 2026
- Low2.1A flaw has been found in SourceCodester RSS Feed Parser 1.0.Check if you run itEPSS 0.35%Mar 30, 2026
- High7.1Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.59%Mar 30, 2026
- Critical9.8CrewAI contains a server-side request forgery vulnerability that enables content acquisition from internal and cloud services, facilitated by the RAG search tools not…Check if you run itEPSS 0.49%Mar 30, 2026
- Medium5.5A flaw was found in virtio-win.Check if you run itEPSS 0.16%Mar 30, 2026
- High8.8An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1.Check if you run itEPSS 0.32%Mar 30, 2026
- Medium6.1A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.26%Mar 30, 2026
- High7.1A Cross-Site Request Forgery (CSRF) vulnerability in the WatchGuard Fireware OS WebUI could allow a remote attacker to trigger a denial-of-service (DoS) condition in t…Check if you run itEPSS 0.24%Mar 30, 2026
- High8.2A flaw was found in libsoup.Check if you run itEPSS 0.25%Mar 30, 2026
- High8.3A critical security vulnerability in parisneo/lollms versions up to 2.2.0 allows any authenticated user to accept or reject friend requests belonging to other users.Check if you run itEPSS 0.27%Mar 29, 2026