Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8An authenticated stored cross-site scripting (XSS) vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via inCheck if you run itEPSS 0.19%Apr 6, 2026
- Medium5.4An authenticated stored cross-site scripting (XSS) vulnerability in Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload intoCheck if you run itEPSS 0.18%Apr 6, 2026
- Medium5.4An authenticated stored cross-site scripting (XSS) vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via inCheck if you run itEPSS 0.14%Apr 6, 2026
- Medium5.4A stored cross-site scripting (XSS) vulnerability in Bynder before 12 January 2026 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.Check if you run itEPSS 0.14%Apr 6, 2026
- Critical9.8An issue in the login mechanism of Kaleris YMS v7.2.2.1 allows attackers to bypass login verification to access the application 's resources.Check if you run itEPSS 0.40%Apr 6, 2026
- Medium4.3Incorrect access control in Kaleris YMS v7.2.2.1 allows authenticated attackers with only the shipping/receiving role to view the truck's dashboard resources.Check if you run itEPSS 0.21%Apr 6, 2026
- Medium6.8A remote command execution (RCE) vulnerability in the /goform/formReleaseConnect component of UTT Aggressive 520W v3v1.7.7-180627 allows attackers to execute arbitrary commands viaCheck if you run itEPSS 0.48%Apr 6, 2026
- Medium4.5UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the selDateType parameter of the formTaskEdit function.Check if you run itEPSS 0.25%Apr 6, 2026
- Medium4.5UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the addCommand parameter of the formConfigCliForEngineerOnly function.Check if you run itEPSS 0.24%Apr 6, 2026
- Medium4.5UTT Aggressive HiPER 1200GW v2.5.3-170306 was discovered to contain a buffer overflow in the pools parameter of the formArpBindConfig function.Check if you run itEPSS 0.25%Apr 6, 2026
- Medium4.5UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the filename parameter of the formFtpServerDirConfig function.Check if you run itEPSS 0.24%Apr 6, 2026
- Medium4.5UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the timestart parameter of the ConfigAdvideo function.Check if you run itEPSS 0.24%Apr 6, 2026
- Medium4.5UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the notes parameter of the formGroupConfig function.Check if you run itEPSS 0.26%Apr 6, 2026
- Critical9.8A remote command execution (RCE) vulnerability in the /goform/formDia component of UTT Aggressive HiPER 520W v3v1.7.7-180627 allows attackers to execute arbitrary commands via a crCheck if you run itEPSS 0.94%Apr 6, 2026
- Medium4.5UTT Aggressive HiPER 1200GW v2.5.3-170306 was discovered to contain a buffer overflow in the timeRangeName parameter of the formConfigDnsFilterGlobal function.Check if you run itEPSS 0.26%Apr 6, 2026
- Medium6.2A double free vulnerability exists in librz/bin/format/le/le.c in the function le_load_fixup_record().Check if you run itEPSS 0.15%Apr 6, 2026
- Medium4.6An information disclosure vulnerability exists in AZIOT 1 Node Smart Switch (16amp)- WiFi/Bluetooth Enabled Software Version: 1.1.9 due to improper access control on the UART debugCheck if you run itEPSS 0.18%Apr 6, 2026
- High7.5OpenAirInterface V2.2.0 AMF crashes when it receives an NGAP message with invalid procedure code or invalid PDU-type.Check if you run itEPSS 0.30%Apr 6, 2026
- Critical9.8ninjaforms ninja_forms_file_uploads Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 62.90%Apr 6, 2026
- Medium6.1An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL.Check if you run itEPSS 0.18%Apr 6, 2026
- High7.5An issue was discovered in USIM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, WCheck if you run itEPSS 0.29%Apr 6, 2026
- Critical9.1An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W92Check if you run itEPSS 0.32%Apr 6, 2026
- High7.5An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W9Check if you run itEPSS 0.29%Apr 6, 2026
- High7.5An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem (Exynos 980, 850, 990, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 1680, 9110, W9Check if you run itEPSS 0.36%Apr 6, 2026
- High7.0An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000.Check if you run itEPSS 0.09%Apr 6, 2026
Sort