Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7A weakness has been identified in D-Link DWR-M920, DWR-M921, DWR-M960, DIR-822K and DIR-825M 1.01.07.Check if you run itEPSS 3.85%Nov 17, 2025
- High8.7A hard-coded password vulnerability exists in the ControlVault WBDI Driver functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47.Check if you run itEPSS 0.24%Nov 17, 2025
- High8.7A privilege escalation vulnerability exists in the ControlVault WBDI Driver WBIO_USH_ADD_RECORD functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 PlusCheck if you run itEPSS 0.23%Nov 17, 2025
- High7.3Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and DelCheck if you run itEPSS 0.17%Nov 17, 2025
- High7.3Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and DelCheck if you run itEPSS 0.15%Nov 17, 2025
- High7.3Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and DelCheck if you run itEPSS 0.15%Nov 17, 2025
- High7.3Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and DelCheck if you run itEPSS 0.17%Nov 17, 2025
- High8.8A buffer overflow vulnerability exists in the CvManager_SBI functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47.Check if you run itEPSS 0.33%Nov 17, 2025
- High8.7A security flaw has been discovered in D-Link DWR-M920, DWR-M921, DWR-M960, DWR-M961 and DIR-825M 1.01.07/1.1.47.Check if you run itEPSS 0.88%Nov 17, 2025
- High8.8A buffer overflow vulnerability exists in the CvManager functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47.Check if you run itEPSS 0.29%Nov 17, 2025
- Medium5.3NixOS's Onlyoffice is a software suite that offers online and offline tools for document editing, collaboration, and management.Check if you run itEPSS 0.30%Nov 17, 2025
- Medium4.8@dependencytrack/frontend is a Single Page Application (SPA) used in Dependency-Track, an open source Component Analysis platform that allows organizations to identify and reduce rCheck if you run itEPSS 0.24%Nov 17, 2025
- Medium5.5A flaw was found in libvirt.Check if you run itEPSS 0.13%Nov 17, 2025
- High8.7A security vulnerability has been detected in Tenda CH22 1.0.0.1.Check if you run itEPSS 0.95%Nov 17, 2025
- High7.3A vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V29.0.258), Simcenter Femap (All versions < V2512.0003), Solid Edge (All versions < V2Check if you run itEPSS 0.20%Nov 17, 2025
- Critical9.4A SQL Injection vulnerability on an endpoint in BEIMS Contractor Web, a legacy product that is no longer maintained or patched by the vendor, allows an unauthorised user to retrievCheck if you run itEPSS 0.30%Nov 17, 2025
- High8.7A vulnerability was detected in Tenda AC20 up to 16.03.08.12.Check if you run itEPSS 0.80%Nov 17, 2025
- High7.5OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization.Check if you run itEPSS 0.24%Nov 17, 2025
- Medium6.1kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /client_user/feedback.php.Check if you run itEPSS 0.24%Nov 17, 2025
- Medium6.1kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the formuser and formpassword parameters in /adminLogin.php.Check if you run itEPSS 0.24%Nov 17, 2025
- Medium6.5PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page.Check if you run itEPSS 0.26%Nov 17, 2025
- Medium6.5Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email parameter in user_login.php.Check if you run itEPSS 0.26%Nov 17, 2025
- Medium6.5Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email, username, user_firstname, user_lastname, and user_address parameters in user_register.php.Check if you run itEPSS 0.26%Nov 17, 2025
- Medium6.5PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-details.php.Check if you run itEPSS 0.26%Nov 17, 2025
- Medium6.1PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via the aremark parameter in manage-tickets.php.Check if you run itEPSS 0.24%Nov 17, 2025
Sort