Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1A stored cross‑site scripting (XSS) vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to create a trunk entry con…Check if you run itEPSS 0.26%Mar 18, 2026
- Medium5.3A stack-based buffer overflow in the device's Telnet/SSH CLI login routine occurs when a unauthenticated attacker send an oversized or unexpected username input.Check if you run itEPSS 0.38%Mar 18, 2026
- Medium6.5A stack-based buffer overflow in the CLI's TFTP file‑transfer command handling allows a low-privileged attacker with Telnet/SSH access to trigger memory corruption by…Check if you run itEPSS 0.33%Mar 18, 2026
- Medium4.9A stack-based buffer overflow in the device's file installation workflow allows a high-privileged attacker to send oversized POST parameters that overflow a fixed-size…Check if you run itEPSS 0.35%Mar 18, 2026
- Medium4.9A stack-based buffer overflow vulnerability in the device's file transfer parameter workflow allows a high-privileged attacker to send oversized POST parameters, causi…Check if you run itEPSS 0.35%Mar 18, 2026
- High7.2A command injection vulnerability in the device’s Root CA certificate transfer workflow allows a high-privileged attacker to send crafted HTTP POST requests that resul…Check if you run itEPSS 1.04%Mar 18, 2026
- Medium6.5A remote attacker with user privileges for the webUI can use the setting of the TFTP Filename with a POST Request to trigger a stack-based Buffer Overflow, resulting i…Check if you run itEPSS 0.39%Mar 18, 2026
- Low2.4A vulnerability found in Dahua NVR/XVR device.Check if you run itEPSS 0.29%Mar 18, 2026
- Medium6.1The Writeprint Stylometry plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'p' GET parameter in all versions up to and including 0.1.Check if you run itEPSS 0.21%Mar 18, 2026
- High7.0Glances is an open-source system cross-platform monitoring tool.Check if you run itEPSS 0.25%Mar 18, 2026
- Medium5.9The Get Use APIs WordPress plugin before 2.0.10 executes imported JSON, which could allow users with a role as low as contributor to perform Cross-Site Scripting attac…Check if you run itEPSS 0.14%Mar 18, 2026
- High7.6IncusOS is an immutable OS image dedicated to running Incus.Check if you run itEPSS 0.15%Mar 18, 2026
- High8.7Glances is an open-source system cross-platform monitoring tool.Check if you run itEPSS 1.55%Mar 18, 2026
- High8.7The Azure Blob Storage for Craft CMS plugin provides an Azure Blob Storage integration for Craft CMS.Check if you run itEPSS 0.36%Mar 18, 2026
- Medium5.8A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP redirects when processing certain client configuration requests.Check if you run itEPSS 0.24%Mar 18, 2026
- High8.4Kanboard is project management software focused on Kanban methodology.Check if you run itEPSS 0.29%Mar 18, 2026
- Low2.4The Google Cloud Storage for Craft CMS plugin provides a Google Cloud Storage integration for Craft CMS.Check if you run itEPSS 0.36%Mar 18, 2026
- Medium6.9The Amazon S3 for Craft CMS plugin provides an Amazon S3 integration for Craft CMS.Check if you run itEPSS 0.36%Mar 18, 2026
- High7.5music-metadata is a metadata parser for audio and video media files.Check if you run itEPSS 0.41%Mar 18, 2026
- High7.1Kube-router is a turnkey solution for Kubernetes networking.Check if you run itEPSS 0.31%Mar 18, 2026
- Medium6.1jsPDF is a library to generate PDFs in JavaScript.Check if you run itEPSS 0.27%Mar 18, 2026
- Medium6.5jsPDF is a library to generate PDFs in JavaScript.Check if you run itEPSS 0.37%Mar 18, 2026
- Medium6.5Cockpit is a headless content management system.Check if you run itEPSS 0.40%Mar 18, 2026
- Medium5.3Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation, and client-server communication.Check if you run itEPSS 0.24%Mar 18, 2026
- High7.5pyasn1 is a generic ASN.1 library for Python.Check if you run itEPSS 0.82%Mar 18, 2026
Sort