Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.76%May 13, 2026
- High8.6Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 1.90%May 13, 2026
- High7.5vm2 is an open source vm/sandbox for Node.js.Check if you run itEPSS 0.66%May 13, 2026
- Medium5.9Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.94%May 13, 2026
- High7.5Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.76%May 13, 2026
- Medium6.3A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises (former 1E DEX Platform On-Premises) prior to version 9.2.Check if you run itEPSS 0.34%May 13, 2026
- Medium5.9Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.20%May 13, 2026
- Medium5.3Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.33%May 13, 2026
- Medium6.5Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.28%May 13, 2026
- High8.9urllib3 is an HTTP client library for Python.Check if you run itEPSS 0.88%May 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults contpte_ptep_set_access_flag…Check if you run itEPSS 0.16%May 13, 2026
- Critical9.2NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.Patch nowKEVEPSS 3.40%May 13, 2026
- Medium6.3NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module.Check if you run itEPSS 0.73%May 13, 2026
- High8.7When an HTTP/2 profile and an iRule containing the HTTP::redirect or HTTP::respond command are configured on a virtual server, undisclosed requests can cause the Traff…Check if you run itEPSS 0.46%May 13, 2026
- Medium5.3An authenticated attacker's undisclosed requests to BIG-IP iControl REST can lead to an information leak of BIG-IP local user account names.Check if you run itEPSS 0.26%May 13, 2026
- High8.7When a classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.Check if you run itEPSS 0.46%May 13, 2026
- Medium5.3A cross-site request forgery (CSRF) vulnerability exists in the dashboard of the BIG-IP Configuration utility.Check if you run itEPSS 0.14%May 13, 2026
- Medium6.3NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssl_module module when the ssl_verify_client directive is set to "on" or "optional," and the ssl_…Check if you run itEPSS 0.69%May 13, 2026
- High8.7When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate.Check if you run itEPSS 0.46%May 13, 2026
- High7.1Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code thr…Check if you run itEPSS 0.27%May 13, 2026
- High7.1Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code thr…Check if you run itEPSS 0.27%May 13, 2026
- Medium5.1Kuicms Php EE 2.0 contains a persistent cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted cont…Check if you run itEPSS 0.31%May 13, 2026
- High8.7Joomla com_fabrik 3.9.11 contains a directory traversal vulnerability that allows unauthenticated attackers to list arbitrary files by manipulating the folder parameter.Check if you run itEPSS 0.72%May 13, 2026
- High8.8Joomla com_hdwplayer 4.2 contains an SQL injection vulnerability in the search.php file that allows unauthenticated attackers to execute arbitrary SQL queries by injec…Check if you run itEPSS 0.27%May 13, 2026
- Medium5.1Easy2Pilot 7 contains a cross-site request forgery vulnerability that allows attackers to add unauthorized user accounts by tricking authenticated administrators into…Check if you run itEPSS 0.14%May 13, 2026