Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8A stack buffer overflow vulnerability exists in the Wincor Nixdorf wnBios64.sys kernel driver (version 1.2.0.0) in the IOCTL handler for code 0x80102058.Check if you run itEPSS 0.25%Mar 5, 2026
- Critical9.8D-Link DIR-513 version 1.10 contains a critical-level vulnerability.Check if you run itEPSS 0.70%Mar 5, 2026
- Critical9.3Cross-Site Request Forgery (CSRF) vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Flutter URI scheme handler,…Check if you run itEPSS 0.36%Mar 5, 2026
- Medium5.4Mercurius is a GraphQL adapter for Fastify.Check if you run itEPSS 0.17%Mar 5, 2026
- High7.5In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed HTTP request, with Content-Encoding: gzip, is…Check if you run itEPSS 0.69%Mar 5, 2026
- Medium6.4Server-Side Request Forgery (SSRF) vulnerability in SkatDesign Ratatouille ratatouille allows Server Side Request Forgery.This issue affects Ratatouille: from n/a through <= 1.2.6.Check if you run itEPSS 0.24%Mar 5, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in ThemeREX Equestrian Centre equestrian-centre allows Object Injection.This issue affects Equestrian Centre: from n/a…Check if you run itEPSS 0.41%Mar 5, 2026
- Critical9.3An HTTP Request Smuggling vulnerability (CWE-444) has been found in Pingora's parsing of HTTP/1.0 and Transfer-Encoding requests.Check if you run itEPSS 0.60%Mar 5, 2026
- Critical9.3An HTTP request smuggling vulnerability (CWE-444) was found in Pingora's handling of HTTP/1.1 connection upgrades.Check if you run itEPSS 0.53%Mar 5, 2026
- Low3.4Dark Reader is an accessibility browser extension that makes web pages colors dark.Check if you run itEPSS 0.11%Mar 4, 2026
- High7.5cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.63%Mar 4, 2026
- Medium5.3cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.43%Mar 4, 2026
- Medium5.9OpenDeck is Linux software for your Elgato Stream Deck.Check if you run itEPSS 0.52%Mar 4, 2026
- High7.7A Server-Side Request Forgery (SSRF) vulnerability was identified in the @opennextjs/cloudflare package, resulting from a path normalization bypass in the /cdn-cgi/ima…Check if you run itEPSS 0.45%Mar 4, 2026
- Medium6.1A vulnerability in the VPN web services component of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) So…Check if you run itEPSS 0.28%Mar 4, 2026
- Medium4.3A vulnerability in the VPN web services component of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) So…Check if you run itEPSS 0.29%Mar 4, 2026
- High8.6A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could…Check if you run itEPSS 0.37%Mar 4, 2026
- Medium4.9A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.Check if you run itEPSS 0.30%Mar 4, 2026
- High8.1A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an…Check if you run itEPSS 0.36%Mar 4, 2026
- Medium6.5A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.Check if you run itEPSS 0.34%Mar 4, 2026
- High8.8Ashop Shopping Cart Software contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through…Check if you run itEPSS 0.25%Mar 4, 2026
- High8.8FreeSMS 2.1.2 contains a boolean-based blind SQL injection vulnerability in the password parameter that allows unauthenticated attackers to bypass authentication by in…Check if you run itEPSS 0.47%Mar 4, 2026
- High7.1Tradebox 5.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the symbol parameter.Check if you run itEPSS 0.30%Mar 4, 2026
- High8.8NCrypted Jobgator contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the experi…Check if you run itEPSS 0.25%Mar 4, 2026
- Medium5.1Simple Job Script contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the job_type_value pa…Check if you run itEPSS 0.27%Mar 4, 2026
Sort