Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication.Check if you run itEPSS 0.64%Mar 16, 2026
- Medium5.3Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass authentication.Check if you run itEPSS 0.30%Mar 16, 2026
- High7.1Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attackers to configure a downgraded scheme for authentication.Check if you run itEPSS 0.19%Mar 16, 2026
- Medium5.3Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows remote attackers to set a specific configuration.Check if you run itEPSS 0.33%Mar 16, 2026
- Medium4.8Improper export of android application components in Samsung Assistant prior to version 9.3.10.7 allows local attacker to access saved information.Check if you run itEPSS 0.11%Mar 16, 2026
- Medium4.8Improper authorization in Settings prior to SMR Mar-2026 Release 1 allows local attacker to disable configuring the background data usage of application.Check if you run itEPSS 0.10%Mar 16, 2026
- Medium6.7Improper privilege management in ThemeManager prior to SMR Mar-2026 Release 1 allows local privileged attackers to reuse trial contents.Check if you run itEPSS 0.14%Mar 16, 2026
- High8.4Improper export of android application components in Secure Folder prior to SMR Mar-2026 Release 1 allows local attackers to launch arbitrary activity with Secure Folder privilege.Check if you run itEPSS 0.18%Mar 16, 2026
- Medium5.1Improper verification of cryptographic signature in Font Settings prior to SMR Mar-2026 Release 1 allows physical attackers to use custom font.Check if you run itEPSS 0.13%Mar 16, 2026
- Medium6.8Improper verification of intent by broadcast receiver in Settings prior to SMR Mar-2026 Release 1 allows local attacker to launch arbitrary activity with Settings privilege.Check if you run itEPSS 0.10%Mar 16, 2026
- Medium5.5in OpenHarmony v6.0 and prior versions allow a local attacker case DOS through missing release of memory.Check if you run itEPSS 0.17%Mar 16, 2026
- Medium5.0Microsoft Edge (Chromium-based) for Android Spoofing VulnerabilityCheck if you run itEPSS 0.27%Mar 16, 2026
- Medium5.3Mumble before 1.6.870 is prone to an out-of-bounds array access, which may result in denial of service (client crash).Check if you run itEPSS 0.32%Mar 16, 2026
- Medium5.5in OpenHarmony v5.1.0 and prior versions allow a local attacker cause DOS through improper input.Check if you run itEPSS 0.17%Mar 16, 2026
- Medium6.9Raytha CMS does not have any brute force protection mechanism implemented.Check if you run itEPSS 0.43%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality.Check if you run itEPSS 0.32%Mar 16, 2026
- Medium6.9Raytha CMS is vulnerable to User Enumeration in password reset functionality.Check if you run itEPSS 0.32%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to reflected XSS via the backToListUrl parameter.Check if you run itEPSS 0.28%Mar 16, 2026
- Medium5.3Raytha CMS is vulnerable to Stored XSS via FirstName and LastName parameters in profile editing functionality.Check if you run itEPSS 0.28%Mar 16, 2026
- High7.5Raytha CMS allows an attacker to spoof or headers to attacker controlled domain.Check if you run itEPSS 0.18%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature.Check if you run itEPSS 0.28%Mar 16, 2026
- Medium6.9Raytha CMS is vulnerable to Cross-Site Request Forgery across multiple endpoints.Check if you run itEPSS 0.14%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to Stored XSS via FieldValues[0].Value parameter in page creation functionality.Check if you run itEPSS 0.21%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to Stored XSS via FieldValues[1].Value parameter in post editing functionality.Check if you run itEPSS 0.25%Mar 16, 2026
- Critical9.8HCL AION is affected by a vulnerability where offering images are not digitally signed.Check if you run itEPSS 0.14%Mar 16, 2026
Sort