Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.0In Modem, there is a possible out of bounds write due to a missing bounds check.Check if you run itEPSS 0.31%Apr 7, 2026
- Medium6.5In Modem, there is a possible system crash due to a logic error.Check if you run itEPSS 0.32%Apr 7, 2026
- High8.8Apache ActiveMQ Improper Input Validation VulnerabilityPatch nowKEVEPSS 98.26%Apr 7, 2026
- Medium5.3A flaw has been found in itsourcecode Construction Management System 1.0.Check if you run itEPSS 0.25%Apr 7, 2026
- Medium6.2IBM Concert 1.0.0 through 2.2.0 creates temporary files with predictable names, which allows local users to overwrite arbitrary files via a symlink attack.Check if you run itEPSS 0.14%Apr 7, 2026
- High8.6Adobe Acrobat and Reader Prototype Pollution VulnerabilityPatch nowKEVEPSS 7.34%Apr 7, 2026
- Critical9.3nextendweb smart_slider_3 Embedded Malicious CodePatch nowKEVEPSS 0.56%Apr 7, 2026
- Critical9.8MRCMS 3.1.2 contains an access control vulnerability.Check if you run itEPSS 0.60%Apr 7, 2026
- Critical9.8megagao production_ssm v1.0 contains an authorization bypass vulnerability in the user addition functionality.Check if you run itEPSS 0.57%Apr 7, 2026
- High8.8Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability in the Blocks module.Check if you run itEPSS 0.83%Apr 7, 2026
- Critical9.8In OpenAirInterface V2.2.0 AMF, Out of sequence messages causes incorrect state transition during UE registration procedure.Check if you run itEPSS 0.55%Apr 7, 2026
- Critical9.3Weaver e-cology Missing Authentication for Critical FunctionPatch nowKEVEPSS 20.69%Apr 7, 2026
- Critical9.1Dual DHCP DNS Server 8.01 improperly accepts and caches UDP DNS responses without validating that the response originates from a legitimate configured upstream DNS server.Check if you run itEPSS 0.47%Apr 7, 2026
- Medium6.1yaffa v2.0.0 is vulnerable to Cross Site Scripting (XSS).Check if you run itEPSS 0.28%Apr 7, 2026
- Critical9.1An issue in JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to force the infotainment system into accepting falsified GPS signals as legitimate, resulting iCheck if you run itEPSS 0.48%Apr 7, 2026
- Critical9.8An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W93Check if you run itEPSS 0.48%Apr 7, 2026
- High7.5In GenieACS 1.2.13, an unauthenticated access vulnerability exists in the NBI API endpoint.Check if you run itEPSS 0.46%Apr 7, 2026
- Critical9.8An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000.Check if you run itEPSS 0.52%Apr 7, 2026
- Critical9.8An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000.Check if you run itEPSS 0.52%Apr 7, 2026
- Critical9.8The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL Injection because it fails to sanitize the POST parameter bib_list in /cgi-bin/koha/oCheck if you run itEPSS 0.50%Apr 7, 2026
- Critical9.8Koha Library before 23.05.10 fails to sanitize user-controllable filenames prior to unzipping, leading to remote code execution.Check if you run itEPSS 1.87%Apr 7, 2026
- Unknownthimpress wp_hotel_booking Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.15%Apr 7, 2026
- Medium5.3A vulnerability was identified in code-projects Online Hotel Booking 1.0.Check if you run itEPSS 0.37%Apr 6, 2026
- Medium6.9A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 1.63%Apr 6, 2026
- Medium6.9A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 1.31%Apr 6, 2026
Sort