Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via POST to the goform/formAdvFirewall component.Check if you run itEPSS 0.76%Mar 4, 2026
- High8.8Ashop Shopping Cart Software contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through…Check if you run itEPSS 0.27%Mar 4, 2026
- High8.8FreeSMS 2.1.2 contains a boolean-based blind SQL injection vulnerability in the password parameter that allows unauthenticated attackers to bypass authentication by in…Check if you run itEPSS 0.52%Mar 4, 2026
- High7.1Tradebox 5.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the symbol parameter.Check if you run itEPSS 0.33%Mar 4, 2026
- High8.8NCrypted Jobgator contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the experi…Check if you run itEPSS 0.27%Mar 4, 2026
- High7.1PHPads 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the banne…Check if you run itEPSS 0.38%Mar 4, 2026
- Medium5.1Simple Job Script contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the job_type_value pa…Check if you run itEPSS 0.30%Mar 4, 2026
- High8.8Simple Job Script contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting malicious SQL code through the app_id parameter.Check if you run itEPSS 0.39%Mar 4, 2026
- High8.8Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the employ…Check if you run itEPSS 0.33%Mar 4, 2026
- High8.8Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the job_id parameter.Check if you run itEPSS 0.52%Mar 4, 2026
- High8.8Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the landin…Check if you run itEPSS 0.42%Mar 4, 2026
- High8.7Multer is a node.js middleware for handling .Check if you run itEPSS 0.82%Mar 4, 2026
- Medium6.9Craft is a content management system (CMS).Check if you run itEPSS 0.32%Mar 4, 2026
- High8.6Craft is a content management system (CMS).Check if you run itEPSS 0.59%Mar 4, 2026
- Critical9.4Craft is a content management system (CMS).Check if you run itEPSS 0.51%Mar 4, 2026
- Medium5.3Craft is a content management system (CMS).Check if you run itEPSS 0.27%Mar 4, 2026
- High7.1Craft is a content management system (CMS).Check if you run itEPSS 0.39%Mar 4, 2026
- Critical9.4Craft is a content management system (CMS).Check if you run itEPSS 1.19%Mar 4, 2026
- High8.7Craft is a content management system (CMS).Check if you run itEPSS 0.49%Mar 4, 2026
- High7.5Craft is a content management system (CMS).Check if you run itEPSS 0.66%Mar 4, 2026
- Medium4.2A vulnerability has been identified where an attacker connecting to an access point as a standard wired or wireless client can impersonate a gateway by leveraging an a…Check if you run itEPSS 0.16%Mar 4, 2026
- Low3.1A vulnerability in the client isolation mechanism may allow an attacker to bypass Layer 2 (L2) communication restrictions between clients and redirect traffic at Layer 3 (L3).Check if you run itEPSS 0.17%Mar 4, 2026
- Low3.1A vulnerability in the packet processing logic may allow an authenticated attacker to craft and transmit a malicious Wi-Fi frame that causes an Access Point (AP) to cl…Check if you run itEPSS 0.20%Mar 4, 2026
- High7.6A technique has been identified that adapts a known port-stealing method to Wi-Fi environments that use multiple BSSIDs.Check if you run itEPSS 0.29%Mar 4, 2026
- High8.1A vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to install an attacker-controlled Group Temporal Ke…Check if you run itEPSS 0.29%Mar 4, 2026
Sort