Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2FreshRSS is a free, self-hostable RSS aggregator.Check if you run itEPSS 0.28%Mar 9, 2026
- High7.5FreshRSS is a free, self-hostable RSS aggregator.Check if you run itEPSS 0.40%Mar 9, 2026
- Medium5.9Improper access control in user and role restore API endpoints in Devolutions Server 2025.3.11.0 and earlier allows a low-privileged authenticated user to restore dele…Check if you run itEPSS 0.18%Mar 9, 2026
- High7.5An incorrect access control vulnerability exists in Tenda W15E V02.03.01.26_cn.Check if you run itEPSS 0.34%Mar 9, 2026
- Medium6.1An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.Check if you run itEPSS 0.25%Mar 9, 2026
- Medium6.9Keygraph Shannon contains a hard-coded API key in its router configuration that, when the router component is enabled and exposed, allows network attackers to authenti…Check if you run itEPSS 0.26%Mar 9, 2026
- Critical9.8An issue pertaining to CWE-78: Improper Neutralization of Special Elements used in an OS Command was discovered in linagora Twake v2023.Q1.1223.Check if you run itEPSS 0.40%Mar 9, 2026
- High8.8An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in linagora Twake v2023.Q1.1223.Check if you run itEPSS 0.36%Mar 9, 2026
- High7.5An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in mscdex ssh2 v1.17.0.Check if you run itEPSS 0.36%Mar 9, 2026
- Medium5.4An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.Check if you run itEPSS 0.25%Mar 9, 2026
- Medium6.1An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in linagora Twake v2023.Q1.1223.Check if you run itEPSS 0.22%Mar 9, 2026
- High8.5A command injection vulnerability was identified in the web module of Archer AXE75 v1.6/v1.0 router.Check if you run itEPSS 1.43%Mar 9, 2026
- Medium5.5A server-side request forgery (SSRF) vulnerability in IKEA Dirigera v2.866.4 allows an attacker to exfiltrate private keys by sending a crafted request.Check if you run itEPSS 0.11%Mar 9, 2026
- High8.5MobaXterm versions prior to 26.1 contain an uncontrolled search path element vulnerability.Check if you run itEPSS 0.14%Mar 9, 2026
- Medium5.4An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in YMFE yapi v1.12.0.Check if you run itEPSS 0.20%Mar 9, 2026
- Medium6.5An issue pertaining to CWE-312: Cleartext Storage of Sensitive Information was discovered in lesspass lesspass v9.6.9 which allows attackers to obtain sensitive information.Check if you run itEPSS 0.17%Mar 9, 2026
- High7.5An issue pertaining to CWE-319: Cleartext Transmission of Sensitive Information was discovered in Nexusoft NexusInterface v3.2.0-beta.2.Check if you run itEPSS 0.20%Mar 9, 2026
- High7.5An issue pertaining to CWE-400: Uncontrolled Resource Consumption was discovered in Nexusoft NexusInterface v3.2.0-beta.2.Check if you run itEPSS 0.36%Mar 9, 2026
- Critical9.8An issue pertaining to CWE-829: Inclusion of Functionality from Untrusted Control Sphere was discovered in Miazzy oa-front-service master.Check if you run itEPSS 0.37%Mar 9, 2026
- Critical9.8An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in oslabs-beta ThermaKube master.Check if you run itEPSS 0.34%Mar 9, 2026
- Medium5.3An issue pertaining to CWE-532: Insertion of Sensitive Information into Log File was discovered in LupinLin1 jimeng-web-mcp v2.1.2.Check if you run itEPSS 0.25%Mar 9, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fs/xattr: missing fdput() in fremovexattr error path In the Linux kernel, the fremovexattr() syscal…Check if you run itEPSS 0.22%Mar 9, 2026
- High7.5Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formdumpeasysetup.Check if you run itEPSS 0.47%Mar 9, 2026
- High7.5Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWAN_Wizard534.Check if you run itEPSS 0.59%Mar 9, 2026
- High7.5Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWAN_Wizard52.Check if you run itEPSS 0.59%Mar 9, 2026
Sort