Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7arduino-TuyaOpen before version 1.2.1 contains a heap-based buffer overflow vulnerability in the DnsServer component.Check if you run itEPSS 0.43%Mar 15, 2026
- High7.0arduino-TuyaOpen before version 1.2.1 contains an out-of-bounds memory read vulnerability in the TuyaIoT component.Check if you run itEPSS 0.24%Mar 15, 2026
- High8.6arduino-TuyaOpen before version 1.2.1 contains a single-byte buffer overflow vulnerability in the WiFiMulti component.Check if you run itEPSS 0.21%Mar 15, 2026
- Medium5.1ZKTeco ZKAccess Security System 5.3.1 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting malicious paCheck if you run itEPSS 0.29%Mar 15, 2026
- Medium6.8ZKTeco ZKBioSecurity 3.0 contains a local authorization bypass vulnerability in visLogin.jsp that allows attackers to authenticate without valid credentials by spoofing localhost rCheck if you run itEPSS 0.17%Mar 15, 2026
- Critical9.3ZKTeco ZKBioSecurity 3.0 contains a user enumeration vulnerability that allows unauthenticated attackers to discover valid usernames by submitting partial characters via the usernaCheck if you run itEPSS 0.62%Mar 15, 2026
- Medium6.9ZKTeco ZKBioSecurity 3.0 contains a file path manipulation vulnerability that allows attackers to access arbitrary files by modifying file paths used to retrieve local resources.Check if you run itEPSS 0.23%Mar 15, 2026
- Medium5.3ZKTeco ZKBioSecurity 3.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by tricking logged-in users into visiting malicCheck if you run itEPSS 0.23%Mar 15, 2026
- Medium5.1ZKTeco ZKBioSecurity 3.0 contains multiple reflected cross-site scripting vulnerabilities that allow attackers to execute arbitrary HTML and script code by injecting malicious paylCheck if you run itEPSS 0.28%Mar 15, 2026
- Critical9.3ZKTeco ZKBioSecurity 3.0 contains hardcoded credentials in the bundled Apache Tomcat server that allow unauthenticated attackers to access the manager application.Check if you run itEPSS 0.87%Mar 15, 2026
- High8.7ZKTeco ZKAccess Professional 3.5.3 contains an insecure file permissions vulnerability that allows authenticated users to escalate privileges by modifying executable files.Check if you run itEPSS 0.49%Mar 15, 2026
- Critical9.3ZKTeco ZKTime.Net 3.0.1.6 contains an insecure file permissions vulnerability that allows unprivileged users to escalate privileges by modifying executable files.Check if you run itEPSS 0.81%Mar 15, 2026
- Medium6.9A vulnerability was identified in D-Link DIR-816 1.10CNB05.Check if you run itEPSS 1.55%Mar 15, 2026
- Medium5.1A vulnerability was determined in Aureus ERP up to 1.3.0-BETA2.Check if you run itEPSS 0.29%Mar 15, 2026
- Medium4.8A vulnerability has been found in Radare2 5.9.9.Check if you run itEPSS 0.13%Mar 15, 2026
- High8.8A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the file at lines 161-167.Check if you run itEPSS 1.71%Mar 15, 2026
- Medium5.3A flaw has been found in CodePhiliaX Chat2DB up to 0.3.7.Check if you run itEPSS 0.27%Mar 15, 2026
- High8.6A vulnerability was detected in TRENDnet TEW-632BRP 1.010B32.Check if you run itEPSS 0.70%Mar 15, 2026
- Medium5.3A security vulnerability has been detected in CodeGenieApp serverless-express up to 4.17.1.Check if you run itEPSS 0.31%Mar 15, 2026
- Critical9.3A weakness has been identified in Topsec TopACM 3.0.Check if you run itEPSS 3.18%Mar 15, 2026
- Medium4.8A security flaw has been discovered in Tecnick TCExam up to 16.6.0.Check if you run itEPSS 0.24%Mar 15, 2026
- Medium4.8A vulnerability was identified in Tecnick TCExam 16.5.0.Check if you run itEPSS 0.31%Mar 15, 2026
- High8.7A vulnerability was determined in Belkin F9K1122 1.00.33.Check if you run itEPSS 0.52%Mar 15, 2026
- Medium5.1A vulnerability was found in Wavlink WL-NU516U1 240425.Check if you run itEPSS 0.24%Mar 15, 2026
- Medium4.8A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25.Check if you run itEPSS 0.23%Mar 15, 2026
Sort