Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8RealtyScript 4.0.2 Multiple Time-based Blind SQL InjectionCheck if you run itEPSS 0.47%Mar 15, 2026
- High8.7Serviio PRO 1.8 contains an improper access control vulnerability in the Configuration REST API that allows unauthenticated attackers to change the mediabrowser login password.Check if you run itEPSS 0.45%Mar 15, 2026
- Medium5.1Serviio PRO 1.8 DLNA Media Streaming Server contains a DOM-based cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting malCheck if you run itEPSS 0.28%Mar 15, 2026
- High8.5Serviio PRO 1.8 contains an unquoted search path vulnerability in the Windows service that allows local users to execute arbitrary code with elevated privileges by placing maliciouCheck if you run itEPSS 0.16%Mar 15, 2026
- High8.7Serviio PRO 1.8 contains an information disclosure vulnerability due to improper access control enforcement in the Configuration REST API that allows unauthenticated attackers to aCheck if you run itEPSS 0.75%Mar 15, 2026
- Medium5.1Wowza Streaming Engine 4.5.0 contains multiple reflected cross-site scripting vulnerabilities in the enginemanager interface where input passed through various parameters is not prCheck if you run itEPSS 0.28%Mar 15, 2026
- Medium6.9Wowza Streaming Engine 4.5.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by crafting malicious web pages.Check if you run itEPSS 0.18%Mar 15, 2026
- High8.7Wowza Streaming Engine 4.5.0 contains a privilege escalation vulnerability that allows authenticated read-only users to elevate privileges to administrator by manipulating POST parCheck if you run itEPSS 0.24%Mar 15, 2026
- High8.5Wowza Streaming Engine 4.5.0 contains a local privilege escalation vulnerability that allows authenticated users to escalate privileges by replacing executable files due to impropeCheck if you run itEPSS 0.24%Mar 15, 2026
- High8.8RealtyScript 4.0.2 SQL Injection via u_id and agent ParametersCheck if you run itEPSS 0.48%Mar 15, 2026
- Medium5.1RealtyScript 4.0.2 Stored Cross-Site Scripting via text Parameter in pages.phpCheck if you run itEPSS 0.24%Mar 15, 2026
- Medium5.1Next Click Ventures RealtyScript 4.0.2 contains a stored cross-site scripting vulnerability in the location_name parameter of the admin locations interface.Check if you run itEPSS 0.40%Mar 15, 2026
- Medium6.9RealtyScript 4.0.2 Cross-Site Request Forgery Unauthorized User CreationCheck if you run itEPSS 0.23%Mar 15, 2026
- Medium5.1RealtyScript 4.0.2 Stored Cross-Site Scripting via CSV File Upload FilenameCheck if you run itEPSS 0.28%Mar 15, 2026
- Medium5.1Next Click Ventures RealtyScript 4.0.2 fails to properly sanitize file uploads, allowing attackers to store malicious scripts through the file POST parameter in admin/tools.php.Check if you run itEPSS 0.31%Mar 15, 2026
- Medium5.1RealtyScript 4.0.2 Cross-Site Scripting via Multiple ParametersCheck if you run itEPSS 0.33%Mar 15, 2026
- Medium6.9RealtyScript 4.0.2 Multiple Cross-Site Request Forgery and Persistent Cross-Site Scripting VulnerabilitiesCheck if you run itEPSS 0.23%Mar 15, 2026
- High8.7Qool CMS Multiple Persistent Cross-Site Scripting VulnerabilitiesCheck if you run itEPSS 0.41%Mar 15, 2026
- Medium6.9Qool CMS 2.0 RC2 Cross-Site Request Forgery via adduserCheck if you run itEPSS 0.27%Mar 15, 2026
- Medium5.3A vulnerability was found in GPAC up to 2.5-DEV-rev2167-gcc9d617c0-master.Check if you run itEPSS 0.29%Mar 15, 2026
- Critical9.3A vulnerability was detected in D-Link DIR-816 1.10CNB05.Check if you run itEPSS 1.39%Mar 15, 2026
- Critical9.3A security vulnerability has been detected in D-Link DIR-816 1.10CNB05.Check if you run itEPSS 1.39%Mar 15, 2026
- Critical9.3A weakness has been identified in D-Link DIR-816 1.10CNB05.Check if you run itEPSS 1.27%Mar 15, 2026
- Critical9.3A security flaw has been discovered in D-Link DIR-816 1.10CNB05.Check if you run itEPSS 1.39%Mar 15, 2026
- High7.1arduino-TuyaOpen before version 1.2.1 contains a null pointer dereference vulnerability in the WiFiUDP component.Check if you run itEPSS 0.29%Mar 15, 2026
Sort