Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1MOOS core-moos through 10.4.0 contains a remote process termination vulnerability in the SuicidalSleeper component that uses a hard-coded passphrase for multicast comm…Check if you run itEPSS 0.36%Sep 3, 2026
- High8.7MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that creates unbounded connections and threads without limits.Check if you run itEPSS 0.63%Sep 3, 2026
- High8.7MOOS-IvP pMarineViewer through 24.8.1 fails to limit the number of tracked node identities from NODE_REPORT messages, allowing attackers to exhaust memory by supplying…Check if you run itEPSS 0.92%Sep 3, 2026
- High8.7MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities stored in parallel vectors within ShoreBroker::handleMailNodePing().Check if you run itEPSS 0.78%Sep 3, 2026
- High8.7MOOS-IvP versions through 24.8.1 contain a quadratic processing vulnerability in uFldNodeComms where each new node identity creates a ledger entry and triggers all-pai…Check if you run itEPSS 0.78%Sep 3, 2026
- High8.7MOOS-IvP through 24.8.1 contains a denial of service vulnerability in the Demuxer::addMuxPacket() function that trusts the packet count declared in mux headers without validation.Check if you run itEPSS 0.78%Sep 3, 2026
- High8.7MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in isQuoted(), isBraced(), and isChevroned() functions that strip whitespace but index using the orig…Check if you run itEPSS 0.78%Sep 3, 2026
- Critical9.3MOOS essential-moos pShare through 10.0.1 fails to properly authorize PSHARE_CMD messages, allowing any publisher to reconfigure network routes and listeners at runtime.Check if you run itEPSS 0.77%Sep 3, 2026
- High8.8MOOS essential-moos through 10.0.1 contains an authentication bypass vulnerability in pShare that accepts UDP datagrams from any source and republishes them with the a…Check if you run itEPSS 1.66%Sep 3, 2026
- Critical9.3MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write variables.Check if you run itEPSS 0.81%Sep 3, 2026
- Critical9.2MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary programs by publis…Check if you run itEPSS 0.55%Sep 3, 2026
- Critical9.3MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAY_MOOS variable handler that passes unsanitized text to a shell command.Check if you run itEPSS 1.78%Sep 3, 2026
- Critical9.3MOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated clients to connect with full publish, subscribe, and database clear privileges.Check if you run itEPSS 0.81%Sep 3, 2026
- Critical10.0Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.90%Sep 3, 2026
- High8.7MOOS core-moos through 10.4.0 MOOSDB Accept Loop Denial of ServiceCheck if you run itEPSS 0.63%Sep 3, 2026
- High8.7MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Unbounded Packet AllocationCheck if you run itEPSS 0.76%Sep 3, 2026
- High8.7MOOS core-moos through 10.4.0 fails to validate that serialized string lengths are non-negative in CMOOSMsg::operator>>.Check if you run itEPSS 0.66%Sep 3, 2026
- Critical9.3MOOS core-moos through 10.4.0 MOOSDB Pre-Authentication Heap Overflow via Negative Packet LengthCheck if you run itEPSS 1.03%Sep 3, 2026
- High8.5MOOS-IvP through 24.8.1 alogsplit Command Injection via Input PathnameCheck if you run itEPSS 0.47%Sep 3, 2026
- Critical9.3MOOS-IvP through 24.8.1 Out-of-Bounds Write via Unvalidated IvP Payload CountsCheck if you run itEPSS 1.09%Sep 3, 2026
- Critical9.3MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust attacker-controlled length fields without validation.Check if you run itEPSS 1.44%Sep 3, 2026
- High8.7MOOS essential-moos through 10.0.1 pMOOSBridge Heap Corruption via Negative UDP LengthCheck if you run itEPSS 2.08%Sep 3, 2026
- Critical9.3MOOS-IvP through 24.8.1 uFldNodeBroker Unauthenticated Shore Route EnrollmentCheck if you run itEPSS 0.41%Sep 3, 2026
- Critical9.3MOOS-IvP uFldShoreBroker through 24.8.1 fails to verify node ping authenticity before creating outbound bridge routes.Check if you run itEPSS 0.41%Sep 3, 2026
- High8.8MOOS core-moos through 10.4.0 MOOSDB Message Source Spoofing via Wire IdentityCheck if you run itEPSS 0.51%Sep 3, 2026