Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5TOTOLINK N200RE V9.3.5u.6437_B20230519 is vulnerable to command Injection in setOpModeCfg via hostName.Check if you run itEPSS 1.10%Dec 15, 2025
- Low3.3An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API.Check if you run itEPSS 0.14%Dec 15, 2025
- Low2.9uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.Check if you run itEPSS 0.14%Dec 14, 2025
- Medium4.5MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files.Check if you run itEPSS 0.26%Dec 14, 2025
- Medium5.1A security vulnerability has been detected in DedeBIZ up to 6.5.9.Check if you run itEPSS 7.28%Dec 14, 2025
- Medium5.3In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short.Check if you run itEPSS 0.35%Dec 14, 2025
- Critical9.8Exim before 4.99.1, with certain non-default rate-limit configurations, allows a remote heap-based buffer overflow because database records are cast directly to internal structuresCheck if you run itEPSS 0.47%Dec 14, 2025
- High7.5The vulnerability arises when a client fetches a tools’ JSON specification, known as a Manual, from a remote Manual Endpoint.Check if you run itEPSS 0.26%Dec 13, 2025
- Medium5.3TOTOLINK x5000r_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 2.76%Dec 13, 2025
- Medium4.3The Userback plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the userback_get_json function in all versions up to, and includCheck if you run itEPSS 0.24%Dec 13, 2025
- High7.0OpenPLC_V3 is vulnerable to a cross-site request forgery (CSRF) attack due to the absence of proper CSRF validation.Check if you run itEPSS 0.29%Dec 13, 2025
- Medium5.3PCSX2 is a free and open-source PlayStation 2 (PS2) emulator.Check if you run itEPSS 0.34%Dec 12, 2025
- High7.5Apple iOS/iPadOS/visionOS and macOS Sequoia/Tahoe FaceTime Password DisclosurePatch nowKEVEPSS 0.86%Dec 12, 2025
- High7.8Apple iOS/iPadOS and macOS Sequoia/Sonoma/Tahoe Privilege EscalationPatch nowKEVEPSS 0.18%Dec 12, 2025
- Medium5.5Apple macos Improper Input ValidationPatch nowKEVEPSS 0.20%Dec 12, 2025
- Low2.8Apple macos Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 0.27%Dec 12, 2025
- Medium5.5Apple macos Improper AuthorizationPatch nowKEVEPSS 0.20%Dec 12, 2025
- Low3.3Apple macOS Sequoia/Sonoma/Tahoe Log Entry Data Redaction VulnerabilityPatch nowKEVEPSS 0.18%Dec 12, 2025
- Medium5.1A security vulnerability has been detected in Qualitor up to 8.24.73.Check if you run itEPSS 0.25%Dec 12, 2025
- High8.4Lightning Flow Scanner provides a A CLI plugin, VS Code Extension and GitHub Action for analysis and optimization of Salesforce Flows.Check if you run itEPSS 0.19%Dec 12, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: usb: storage: sddr55: Reject out-of-bound new_pba Discovered by Atuin - Automated Vulnerability Discovery EngineCheck if you run itEPSS 0.20%Dec 12, 2025
- Medium6.9Code Injection using Electron Fuses in waveterm on MacOS allows TCC Bypass.Check if you run itEPSS 0.21%Dec 12, 2025
- Medium5.5Apple Multiple Products Classic Buffer Overflow VulnerabilityPatch nowKEVEPSS 0.43%Dec 12, 2025
- High7.8Apple Multiple Products Improper Locking VulnerabilityPatch nowKEVEPSS 0.36%Dec 12, 2025
- Low3.7AzuraCast is a self-hosted, all-in-one web radio management suite.Check if you run itEPSS 0.25%Dec 12, 2025
Sort