Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.9A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 1.85%Apr 12, 2026
- High8.7A weakness has been identified in Tenda F451 1.0.0.7_cn_svn7958.Check if you run itEPSS 0.63%Apr 12, 2026
- High8.7A vulnerability was identified in Tenda F451 1.0.0.7_cn_svn7958.Check if you run itEPSS 0.55%Apr 12, 2026
- Critical9.3A vulnerability was determined in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 2.21%Apr 12, 2026
- Medium6.9A flaw has been found in chatboxai chatbox up to 1.20.0.Check if you run itEPSS 1.56%Apr 12, 2026
- Medium5.5A vulnerability was detected in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4.Check if you run itEPSS 0.40%Apr 12, 2026
- High7.5Varnish Cache 9 before 9.0.1 allows a "workspace overflow" denial of service (daemon panic) after timeout_linger.Check if you run itEPSS 0.35%Apr 12, 2026
- High7.5Varnish Enterprise before 6.0.16r12 allows a "workspace overflow" denial of service (daemon panic) for shared VCL.Check if you run itEPSS 0.24%Apr 12, 2026
- High7.5Varnish Cache 9 before 9.0.1 and Varnish Enterprise before 6.0.16r11 allows a "workspace overflow" denial of service (daemon panic) for certain amounts of prefetched data.Check if you run itEPSS 0.24%Apr 12, 2026
- High7.1In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of…Check if you run itEPSS 0.15%Apr 12, 2026
- High7.1In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks.Check if you run itEPSS 0.10%Apr 12, 2026
- Critical9.8In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then usCheck if you run itEPSS 0.43%Apr 12, 2026
- Critical9.3CF Image Hosting Script 1.6.5 allows unauthenticated attackers to download and decode the application database by accessing the imgdb.db file in the upload/data directory.Check if you run itEPSS 0.62%Apr 12, 2026
- High8.6Easy Video to iPod Converter 1.6.20 contains a local buffer overflow vulnerability in the user registration field that allows local attackers to overwrite the structur…Check if you run itEPSS 0.21%Apr 12, 2026
- High8.6HTML5 Video Player 1.2.5 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized key code string.Check if you run itEPSS 0.21%Apr 12, 2026
- High7.1MyT-PM 1.5.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the Charge[group_totalCheck if you run itEPSS 0.28%Apr 12, 2026
- Medium6.9BlueAuditor 1.7.2.0 contains a buffer overflow vulnerability in the registration key field that allows local attackers to crash the application by submitting an oversized key valueCheck if you run itEPSS 0.20%Apr 12, 2026
- Medium6.9SpotFTP Password Recover 2.4.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized buffer in the Name field duCheck if you run itEPSS 0.21%Apr 12, 2026
- High8.8Dolibarr ERP-CRM 8.0.4 contains an SQL injection vulnerability in the rowid parameter of the admin dict.php endpoint that allows attackers to execute arbitrary SQL queries.Check if you run itEPSS 0.32%Apr 12, 2026
- Medium5.3Heatmiser Wifi Thermostat 1.7 contains a cross-site request forgery vulnerability that allows attackers to change administrator credentials by tricking authenticated users into subCheck if you run itEPSS 0.13%Apr 12, 2026
- High7.1eBrigade ERP 4.5 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameterCheck if you run itEPSS 0.27%Apr 12, 2026
- High8.7Across DR-810 contains an unauthenticated file disclosure vulnerability that allows remote attackers to download the rom-0 backup file containing sensitive information by sending aCheck if you run itEPSS 0.54%Apr 12, 2026
- High8.6Echo Mirage 3.1 contains a stack buffer overflow vulnerability that allows local attackers to crash the application or execute arbitrary code by supplying an oversized string in thCheck if you run itEPSS 0.25%Apr 12, 2026
- High7.1ImpressCMS 1.3.11 contains a time-based blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'bid'Check if you run itEPSS 0.35%Apr 12, 2026
- High7.1Newsbull Haber Script 1.0.0 contains multiple SQL injection vulnerabilities in the search parameter that allow authenticated attackers to extract database information through time-Check if you run itEPSS 0.32%Apr 12, 2026
Sort