National Vulnerability Database • Synced Real-Time from NIST NVD & MITRE

Universal Security Vulnerabilities & CVE Catalog

Fast, deterministic intelligence across 391,734 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.

Reset All
Quick Filters: Critical (9.0+) High (7.0+) 2026 Advisories 2025 Advisories 2024 Advisories Remote Exploits (AV:N)
Found 39,241 matching advisories
Page 14 of 1,636
CVE-2024-54556 LOW 2.4
apple/ipados CWE-284

This issue was addressed through improved state management. This issue is fixed in iOS 18.1 and iPadOS 18.1. A user may be able to view restricted content from the lock screen....

📅 2026-01-16 Inspect Dossier →
CVE-2024-44238 HIGH 7.8
apple/ipados CWE-119

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1. An app may be able to corrupt coprocessor memory....

📅 2026-01-16 Inspect Dossier →
CVE-2024-44210 LOW 3.3
apple/macos CWE-284

This issue was addressed with improved permissions checking. This issue is fixed in macOS Sequoia 15.1. An app may be able to access user-sensitive data....

📅 2026-01-16 Inspect Dossier →
CVE-2024-48077 HIGH 7.5
emqx/nanomq CWE-400 Remote (AV:N)

NanoMQ v0.22.7 is vulnerable to Denial of Service (DoS) due to improper resource throttling. A crafted sequence of requests causes the recv-q queue to saturate, leading to the rapid exhaustion of syst...

📅 2026-01-15 Inspect Dossier →
CVE-2024-54855 MEDIUM 6.4
fabricators/vanilla_os_core_image CWE-321 Remote (AV:N)

fabricators Ltd Vanilla OS 2 Core image v1.1.0 was discovered to contain static keys for the SSH service, allowing attackers to possibly execute a man-in-the-middle attack during connections with othe...

📅 2026-01-13 Inspect Dossier →
CVE-2024-58340 HIGH 7.5
langchain/langchain CWE-1333 Remote (AV:N)

LangChain versions up to and including 0.3.1 contain a regular expression denial-of-service (ReDoS) vulnerability in the MRKLOutputParser.parse() method (libs/langchain/langchain/agents/mrkl/output_pa...

📅 2026-01-12 Inspect Dossier →
CVE-2024-58339 HIGH 7.5
llamaindex/llamaindex CWE-770 Remote (AV:N)

LlamaIndex (run-llama/llama_index) versions up to and including 0.12.2 contain an uncontrolled resource consumption vulnerability in the VannaPack VannaQueryEngine implementation. The custom_query() l...

📅 2026-01-12 Inspect Dossier →
CVE-2024-14021 HIGH 7.8
llamaindex/llamaindex CWE-502

LlamaIndex (run-llama/llama_index) versions up to and including 0.11.6 contain an unsafe deserialization vulnerability in BGEM3Index.load_from_disk() in llama_index/indices/managed/bge_m3/base.py. The...

📅 2026-01-12 Inspect Dossier →
CVE-2024-14020 MEDIUM 5.0
CWE-94 Remote (AV:N)

A weakness has been identified in carboneio carbone up to fbcd349077ad0e8748be73eab2a82ea92b6f8a7e. This impacts an unknown function of the file lib/input.js of the component Formatter Handler. Execut...

📅 2026-01-07 Inspect Dossier →
CVE-2024-31088 MEDIUM 6.5
CWE-79 Remote (AV:N)

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPShop.Ru AdsPlace'r – Ad Manager, Inserter, AdSense Ads allows DOM-Based XSS.This issue af...

📅 2026-01-06 Inspect Dossier →
Showing Page 14 of 1,636 • 39,241 matching CVEs (out of 391,734 NIST advisories)
← Previous Next →