Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8OS command injection in the CWMP client (/ftl/bin/cwmp) of Small Cell Sercomm SCE4255W (FreedomFi Englewood) firmware before DG3934v3@2308041842 allows remote attacker…Check if you run itEPSS 1.27%Mar 19, 2026
- Critical9.8Use of a hard-coded AES-256-CBC key in the configuration backup/restore implementation of Small Cell Sercomm SCE4255W (FreedomFi Englewood) firmware before DG3934v3@23…Check if you run itEPSS 0.42%Mar 19, 2026
- High7.5There is an arbitrary file read vulnerability in the test connection function of backend database management in wgcloud v3.6.3 and before, which can be used to read an…Check if you run itEPSS 0.38%Mar 19, 2026
- Medium5.7Memory Allocation with Excessive Size Value (CWE-789) in the Prometheus remote_write HTTP handler in Metricbeat can lead Denial of Service via Excessive Allocation (CAPEC-130).Check if you run itEPSS 0.19%Mar 19, 2026
- Low2.1Integer underflow in wolfSSL packet sniffer <= 5.8.4 allows an attacker to cause a buffer overflow in the AEAD decryption path by injecting a TLS record shorter than t…Check if you run itEPSS 0.26%Mar 19, 2026
- Low2.2A stack buffer overflow vulnerability exists in wolfSSL's PKCS7 SignedData encoding functionality.Check if you run itEPSS 0.10%Mar 19, 2026
- High7.5A path traversal and arbitrary file write vulnerability exist in the embedded get function in '_main_.py' in PyMuPDF version, 1.26.5.Check if you run itEPSS 0.37%Mar 19, 2026
- Medium5.1OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of the "Name of Organization" field when filling out case information.Check if you run itEPSS 0.14%Mar 19, 2026
- Medium5.1OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of first and last name fields in the 'My Information' screen.Check if you run itEPSS 0.14%Mar 19, 2026
- Medium5.3OPEXUS eComplaint before version 10.1.0.0 allows an unauthenticated attacker to obtain or guess an existing case number and upload arbitrary files via 'Portal/EEOC/Doc…Check if you run itEPSS 0.20%Mar 19, 2026
- Medium5.1OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of first and last name fields in a user profile.Check if you run itEPSS 0.14%Mar 19, 2026
- Critical9.2OPEXUS eComplaint and eCASE before version 10.1.0.0 include the secret verification code in the HTTP response when requesting a password reset via 'ForcePasswordReset.aspx'.Check if you run itEPSS 0.31%Mar 19, 2026
- High7.5The backend database management connection test feature in wgcloud v3.6.3 has a server-side request forgery (SSRF) vulnerability.Check if you run itEPSS 0.26%Mar 19, 2026
- Medium6.5A flaw was found in libarchive.Check if you run itEPSS 0.31%Mar 19, 2026
- Medium5.1Location Aware Sensor System by Linkit ONE, up to commit f06bd20 (2023-04-26), contains a reflected cross-site scripting vulnerability in the PM25.php file that allows…Check if you run itEPSS 0.43%Mar 19, 2026
- High8.8Devome GRR v4.5.0 was discovered to contain multiple authenticated SQL injection vulnerabilities in the include/session.inc.php file via the referer and user-agent.Check if you run itEPSS 0.26%Mar 19, 2026
- Critical9.8An issue in wgcloud v.2.3.7 and before allows a remote attacker to execute arbitrary code via the test connection functionCheck if you run itEPSS 0.73%Mar 19, 2026
- Critical9.1A flaw was found in libsoup.Check if you run itEPSS 0.43%Mar 19, 2026
- High7.2Unrestricted Upload of File with Dangerous Type vulnerability in ThemeGoods Photography allows Path Traversal.This issue affects Photography: from n/a before 7.7.6.Check if you run itEPSS 0.36%Mar 19, 2026
- High7.7An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access to the network to escalate privileges.Check if you run itEPSS 0.56%Mar 19, 2026
- Critical10.0A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the underlying syst…Check this weekEPSS 28.12%Mar 19, 2026
- High7.8The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.Check if you run itEPSS 0.46%Mar 19, 2026
- High8.8A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx.Check if you run itEPSS 1.45%Mar 19, 2026
- High8.7BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a deserialization of untrusted data vulnerability in the ASP.NET servlet's VIEWSTATE handling that a…Check this weekEPSS 34.36%Mar 19, 2026
- Medium5.3BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the externalfeed/RSS API component that allows…Check this weekEPSS 12.92%Mar 19, 2026
Sort