Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server.Open the advisoryDec 5, 2025
- High7.5An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0.Open the advisoryDec 5, 2025
- Medium6.5Arcade MCP allows you to to create, deploy, and share MCP Servers.Open the advisoryDec 2, 2025
- Unknownnestjs devtools-integration Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 52.01%Aug 18, 2025
- Critical9.3GeoServer is an open source server that allows users to share and edit geospatial data.Check if you run itEPSS 0.30%Jun 10, 2025
- UnknownCisco IOS HTTP Server '?/' String VulnerabilityPatch nowKEVEPSS 4.29%May 22, 2025
- Medium4.3A denial-of-service vulnerability has been identified in the libsoup HTTP client library.Check if you run itEPSS 0.40%May 16, 2025
- Unknownmod_authnz_external_project mod_authnz_external Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.66%Feb 7, 2025
- UnknownApache HTTP Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')Patch nowKEVEPSS 84.51%Jul 25, 2024
- Critical9.1Apache HTTP Server Improper Escaping of Output VulnerabilityPatch nowKEVEPSS 99.96%Jul 1, 2024
- UnknownCisco IOS Improper AuthenticationPatch nowKEVEPSS 68.45%Nov 15, 2023
- UnknownApache HTTP Server versions 2.4.0 to 2.4.23 mod_session_crypto VulnerabilityPatch nowKEVEPSS 49.02%Feb 14, 2023
- Medium6.5There's a flaw in urllib's AbstractBasicAuthHandler class.Check if you run itEPSS 4.80%Mar 10, 2022
- High7.5A flaw was found in python.Check this weekEPSS 13.17%Mar 4, 2022
- Unknownapache2 CVE-2020-11984Patch nowKEVEPSS 90.04%Feb 22, 2022
- Unknownapache2 CVE-2019-10098Patch nowKEVEPSS 73.98%Feb 22, 2022
- Unknownapache2 CVE-2019-10097Patch nowKEVEPSS 52.87%Feb 22, 2022
- Unknownapache2 CVE-2019-0190Patch nowKEVEPSS 59.05%Feb 22, 2022
- Unknownapache2 CVE-2018-8011Patch nowKEVEPSS 55.61%Feb 22, 2022
- Unknownapache2 CVE-2018-1303Patch nowKEVEPSS 69.80%Feb 22, 2022
- Unknownapache2 CVE-2018-11763Patch nowKEVEPSS 50.85%Feb 22, 2022
- Unknownapache2 CVE-2017-9798Patch nowKEVEPSS 95.00%Feb 22, 2022
- UnknownApache HTTP Server Improper Input ValidationPatch nowKEVEPSS 56.77%Feb 22, 2022
- Unknownapache2 CVE-2017-7659Patch nowKEVEPSS 53.94%Feb 22, 2022
- UnknownTP-Link tl-r600vpn_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 53.30%Jan 12, 2022