Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2HCL AION is affected by a vulnerability where generated containers may execute binaries with root-level privileges.Check if you run itEPSS 0.15%Mar 16, 2026
- High7.3HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries.Check if you run itEPSS 0.26%Mar 16, 2026
- High7.8in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write.Check if you run itEPSS 0.18%Mar 16, 2026
- High7.8in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write.Check if you run itEPSS 0.19%Mar 16, 2026
- Low3.3in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information improper input.Check if you run itEPSS 0.15%Mar 16, 2026
- High7.0in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through using incompatible type.Check if you run itEPSS 0.17%Mar 16, 2026
- High8.6Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 allow a low privileged user to read an administrator's password by directly accessing a spec…Check if you run itEPSS 0.19%Mar 16, 2026
- Medium6.0Browser caching of LAPS passwords in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure…Check if you run itEPSS 0.17%Mar 16, 2026
- Medium6.0Non-working logout functionality in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure…Check if you run itEPSS 0.12%Mar 16, 2026
- Medium6.0Insufficient Session Expiration in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure o…Check if you run itEPSS 0.13%Mar 16, 2026
- High8.6"Functions" module in Raytha CMS allows privileged users to write custom code to add functionality to application.Check if you run itEPSS 0.54%Mar 16, 2026
- Medium6.5in OpenHarmony v5.0.3 and prior versions allow a local attacker case sensitive information leak through use of uninitialized resource.Check if you run itEPSS 0.18%Mar 16, 2026
- High8.7Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 have two separate authentication mechanisms - one solely for interface management and one fo…Check if you run itEPSS 0.37%Mar 16, 2026
- Critical9.3Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious content by…Check if you run itEPSS 1.15%Mar 16, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in flexmls Flexmls® IDX flexmls-idx allows Reflected XSS.This issue affects FlexmCheck if you run itEPSS 0.17%Mar 16, 2026
- Medium5.3Global file reads caused by improper URL checks in webserver in Softing Industrial Automation GmbH smartLinks on docker (filesystem modules) allows file access.Check if you run itEPSS 0.41%Mar 16, 2026
- High7.7Heap-based buffer overflow vulnerability in Softing Industrial Automation GmbH smartLink SW-PN and smartLink SW-HT (Webserver modules) allows overflow buffers.This issue affects: sCheck if you run itEPSS 0.56%Mar 16, 2026
- Medium5.5libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition.Check if you run itEPSS 0.19%Mar 16, 2026
- Medium5.5libexpat before 2.7.5 allows an infinite loop while parsing DTD content.Check if you run itEPSS 0.24%Mar 16, 2026
- Medium5.5libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.Check if you run itEPSS 0.19%Mar 16, 2026
- High7.8libexif through 0.6.25 has a flaw in decoding MakerNotes.Check if you run itEPSS 0.22%Mar 16, 2026
- Medium6.9URL redirection in Samsung Account prior to version 15.5.01.1 allows local attackers to potentially get access token.Check if you run itEPSS 0.14%Mar 16, 2026
- Critical9.3Telesquare SKT LTE Router SDT-CS3B1 firmware version 1.2.0 contains an insecure direct object reference vulnerability that allows attackers to bypass authorization and access resouCheck if you run itEPSS 0.58%Mar 16, 2026
- High8.7Telesquare SKT LTE Router SDT-CS3B1 software version 1.2.0 contains an unauthenticated remote reboot vulnerability that allows attackers to trigger device reboot without authenticaCheck if you run itEPSS 0.78%Mar 16, 2026
- Medium5.3Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains a cross-site request forgery vulnerability that allows authenticated attackers to execute arbitrary system commands by exCheck if you run itEPSS 0.32%Mar 16, 2026
Sort