Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.0An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor amd Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000.Check if you run itEPSS 0.09%Apr 6, 2026
- Critical10.0An issue was discovered in SMS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W9Check if you run itEPSS 0.54%Apr 6, 2026
- High7.5An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W9Check if you run itEPSS 0.29%Apr 6, 2026
- Critical9.3topsecgroup tianxin_internet_behavior_management_system Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.27%Apr 6, 2026
- High8.7A weakness has been identified in Tenda CH22 1.0.0.1.Check if you run itEPSS 0.71%Apr 5, 2026
- High8.7A security flaw has been discovered in Tenda CH22 1.0.0.1.Check if you run itEPSS 0.68%Apr 5, 2026
- Medium4.8A vulnerability was identified in elgentos magento2-dev-mcp up to 1.0.2.Check if you run itEPSS 0.91%Apr 5, 2026
- Medium4.8A vulnerability was determined in Nor2-io heim-mcp up to 0.1.3.Check if you run itEPSS 0.91%Apr 5, 2026
- High8.1Missing Authentication for Critical Function vulnerability in Honeywell Handheld Scanners allows Authentication Abuse.This issue affects Handheld Scanners: from C1 Base(Ingenic x10Check if you run itEPSS 0.66%Apr 5, 2026
- Medium6.9A vulnerability was found in Acrel Electrical Prepaid Cloud Platform 1.0.Check if you run itEPSS 0.30%Apr 5, 2026
- Low3.5Zcash zcashd before 6.12.0 allows invalid transactions to be accepted under certain conditions, which potentially could have resulted in the draining of user funds from the SproutCheck if you run itEPSS 0.22%Apr 5, 2026
- Medium5.3A flaw has been found in griptape-ai griptape 0.19.4.Check if you run itEPSS 0.43%Apr 5, 2026
- High8.8eDirectory contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to bypass administrator authentication and disclose sensitive files by injecting SQLCheck if you run itEPSS 0.54%Apr 5, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the filter_user_mail parameter.Check if you run itEPSS 0.32%Apr 5, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the id_project parameter.Check if you run itEPSS 0.32%Apr 5, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the sort_direction parameter.Check if you run itEPSS 0.32%Apr 5, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the id_to_delete parameter.Check if you run itEPSS 0.32%Apr 5, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the language_tag parameter.Check if you run itEPSS 0.32%Apr 5, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the user2reset parametCheck if you run itEPSS 0.40%Apr 5, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the 'id_to_modify' parameter.Check if you run itEPSS 0.32%Apr 5, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the mng_profile_id parameter.Check if you run itEPSS 0.32%Apr 5, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the menu_lev1 parameteCheck if you run itEPSS 0.34%Apr 5, 2026
- Critical9.3Pegasus CMS 1.0 contains a remote code execution vulnerability in the extra_fields.php plugin that allows unauthenticated attackers to execute arbitrary commands by exploiting unsaCheck if you run itEPSS 1.44%Apr 5, 2026
- High8.7Core FTP 2.0 build 653 contains a denial of service vulnerability in the PBSZ command that allows unauthenticated attackers to crash the service by sending a malformed command withCheck if you run itEPSS 0.47%Apr 5, 2026
- High8.8OpenDocMan 1.3.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'where' parameter.Check if you run itEPSS 0.33%Apr 5, 2026
Sort