Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the set_config function.Check if you run itEPSS 2.36%Mar 12, 2026
- High7.5An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supply…Check if you run itEPSS 0.47%Mar 12, 2026
- Critical9.8Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWizardSelectMode.Check if you run itEPSS 0.63%Mar 12, 2026
- Medium6.5Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" pa…Check if you run itEPSS 0.29%Mar 12, 2026
- Medium6.5Heap buffer overflow vulnerability in LibreDWG versions v0.13.3.7571 up to v0.13.3.7835 allows a crafted DWG file to cause a Denial of Service (DoS) via the function d…Check if you run itEPSS 0.23%Mar 12, 2026
- Medium5.4A privileged Ignition user, intentionally or otherwise, imports an external file with a specially crafted payload, which executes embedded malicious code.Check if you run itEPSS 0.34%Mar 12, 2026
- High8.5A command injection vulnerability has been identified in the Telnet command-line interface (CLI) of TP-Link TL-MR6400 v5.3.Check if you run itEPSS 1.76%Mar 12, 2026
- High7.5flatted is a circular JSON parser.Check if you run itEPSS 0.84%Mar 12, 2026
- Critical9.3Dataease is an open source data visualization analysis tool.Check if you run itEPSS 0.72%Mar 12, 2026
- Medium5.3Dataease is an open source data visualization analysis tool.Check if you run itEPSS 0.21%Mar 12, 2026
- Critical9.3Dataease is an open source data visualization analysis tool.Check if you run itEPSS 0.43%Mar 12, 2026
- High8.7soroban-poseidon provides Poseidon and Poseidon2 cryptographic hash functions for Soroban smart contracts.Check if you run itEPSS 0.21%Mar 12, 2026
- High8.2Magic Wormhole makes it possible to get arbitrary-sized files and directories from one computer to another.Check if you run itEPSS 0.36%Mar 12, 2026
- Medium5.3Shopware is an open commerce platform.Check if you run itEPSS 0.21%Mar 12, 2026
- Medium4.8Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF.Check if you run itEPSS 0.15%Mar 12, 2026
- Medium6.1Unhead is a document head and template manager.Check if you run itEPSS 0.25%Mar 12, 2026
- Medium5.3Unhead is a document head and template manager.Check if you run itEPSS 0.27%Mar 12, 2026
- Medium6.9A Use of Hard-coded, Security-relevant Constants vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive infor…Check if you run itEPSS 0.28%Mar 12, 2026
- High8.2A Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts.Check if you run itEPSS 0.30%Mar 12, 2026
- Medium6.9A Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to access sensitive information thro…Check if you run itEPSS 0.28%Mar 12, 2026
- High8.7A Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to cause a den…Check if you run itEPSS 0.32%Mar 12, 2026
- Critical9.2A Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to bypass authentication…Check if you run itEPSS 0.22%Mar 12, 2026
- Critical9.8GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the module parameter in the M.get_system_log function.Check if you run itEPSS 2.64%Mar 12, 2026
- High8.8GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a SQL injection vulnerability via the add_group() function.Check if you run itEPSS 0.48%Mar 12, 2026
- Critical9.8GL-iNet GL-AR300M16 v4.3.11 was discovered to contain multiple command injection vulnerabilities in the set_upgrade function via the modem_url, target_version, current…Check if you run itEPSS 2.95%Mar 12, 2026
Sort