Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticatedCheck if you run itEPSS 0.32%Apr 8, 2026
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 11.3 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated usCheck if you run itEPSS 0.32%Apr 8, 2026
- Medium5.7GitLab has remediated an issue in GitLab EE affecting all versions from 18.0.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that in Code Quality reports could have aCheck if you run itEPSS 0.44%Apr 8, 2026
- UnknownCVE-2026-1403 is listed by GitLab Patch Release: 18.10.3, 18.9.5, 18.8.9.Check if you run itEPSS 0.33%Apr 8, 2026
- Medium6.5GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated usCheck if you run itEPSS 0.43%Apr 8, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.10 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an unauthenticaCheck if you run itEPSS 0.56%Apr 8, 2026
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 16.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that under certain circumstances could haveCheck if you run itEPSS 0.27%Apr 8, 2026
- Medium6.8Siklu EtherHaul 8010 siklu-uimage-nxp-enc-10_6_2-18707-ea552dc00b devices have a static root password.Check if you run itEPSS 0.13%Apr 8, 2026
- High7.5D-Link DI-8003 v16.07.26A1, DI-8500 v16.07.26A1; DI-8003G v17.12.21A1, DI-8200G v17.12.20A1, DI-8200 v16.07.26A1, DI-8400 v16.07.26A1, DI-8004w v16.07.26A1, DI-8100 v16.07.26A1, anCheck if you run itEPSS 0.34%Apr 8, 2026
- Critical9.8Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters.Check if you run itEPSS 0.40%Apr 8, 2026
- High7.5A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the http_lanport parameter in the /webgl.asp endpoint.Check if you run itEPSS 0.42%Apr 8, 2026
- High7.5A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /yyxz_dlink.asp endpoint.Check if you run itEPSS 0.43%Apr 8, 2026
- High7.5A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /xwgl_ref.asp endpoint.Check if you run itEPSS 0.51%Apr 8, 2026
- High7.5A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /xwgl_bwr.asp endpoint.Check if you run itEPSS 0.51%Apr 8, 2026
- High7.5A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 and DI-8003G 19.12.10A1 due to improper handling of the wan_ping parameter in the /wan_ping.asp endpoint.Check if you run itEPSS 0.43%Apr 8, 2026
- High7.5A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the s parameter in the /web_list_opt.asp endpoint.Check if you run itEPSS 0.42%Apr 8, 2026
- High7.5A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the iface parameter in the /wan_line_detection.asp endpoint.Check if you run itEPSS 0.43%Apr 8, 2026
- High7.5D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fn parameter in the tgfile_htm function.Check if you run itEPSS 0.41%Apr 8, 2026
- High7.5D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fx parameter in the jingx_asp function.Check if you run itEPSS 0.41%Apr 8, 2026
- High7.5D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ip_position_asp function.Check if you run itEPSS 0.41%Apr 8, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an unauthenticatCheck if you run itEPSS 0.59%Apr 8, 2026
- Critical9.1QD 20230821 is vulnerable to Server-side request forgery (SSRF) via a crafted requestCheck if you run itEPSS 0.25%Apr 8, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.30%Apr 7, 2026
- Medium4.7Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.37%Apr 7, 2026
- Medium5.4The Download Monitor plugin for WordPress is vulnerable to Cross-Site Request Forgery in the and methods in in all versions up to, and including, 5.1.10.Check if you run itEPSS 0.16%Apr 7, 2026
Sort