Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8RealtyScript 4.0.2 SQL Injection via u_id and agent ParametersCheck if you run itEPSS 0.48%Mar 15, 2026
- Medium5.1RealtyScript 4.0.2 Stored Cross-Site Scripting via text Parameter in pages.phpCheck if you run itEPSS 0.24%Mar 15, 2026
- Medium5.1Next Click Ventures RealtyScript 4.0.2 contains a stored cross-site scripting vulnerability in the location_name parameter of the admin locations interface.Check if you run itEPSS 0.40%Mar 15, 2026
- Medium6.9RealtyScript 4.0.2 Cross-Site Request Forgery Unauthorized User CreationCheck if you run itEPSS 0.23%Mar 15, 2026
- Medium5.1RealtyScript 4.0.2 Stored Cross-Site Scripting via CSV File Upload FilenameCheck if you run itEPSS 0.28%Mar 15, 2026
- Medium5.1Next Click Ventures RealtyScript 4.0.2 fails to properly sanitize file uploads, allowing attackers to store malicious scripts through the file POST parameter in admin/tools.php.Check if you run itEPSS 0.31%Mar 15, 2026
- Medium5.1RealtyScript 4.0.2 Cross-Site Scripting via Multiple ParametersCheck if you run itEPSS 0.33%Mar 15, 2026
- Medium6.9RealtyScript 4.0.2 Multiple Cross-Site Request Forgery and Persistent Cross-Site Scripting VulnerabilitiesCheck if you run itEPSS 0.23%Mar 15, 2026
- High8.7Qool CMS Multiple Persistent Cross-Site Scripting VulnerabilitiesCheck if you run itEPSS 0.41%Mar 15, 2026
- Medium6.9Qool CMS 2.0 RC2 Cross-Site Request Forgery via adduserCheck if you run itEPSS 0.27%Mar 15, 2026
- Medium5.3A vulnerability was found in GPAC up to 2.5-DEV-rev2167-gcc9d617c0-master.Check if you run itEPSS 0.29%Mar 15, 2026
- Critical9.3A vulnerability was detected in D-Link DIR-816 1.10CNB05.Check if you run itEPSS 1.39%Mar 15, 2026
- Critical9.3A security vulnerability has been detected in D-Link DIR-816 1.10CNB05.Check if you run itEPSS 1.39%Mar 15, 2026
- Critical9.3A weakness has been identified in D-Link DIR-816 1.10CNB05.Check if you run itEPSS 1.27%Mar 15, 2026
- Critical9.3A security flaw has been discovered in D-Link DIR-816 1.10CNB05.Check if you run itEPSS 1.39%Mar 15, 2026
- High7.1arduino-TuyaOpen before version 1.2.1 contains a null pointer dereference vulnerability in the WiFiUDP component.Check if you run itEPSS 0.29%Mar 15, 2026
- High8.7arduino-TuyaOpen before version 1.2.1 contains a heap-based buffer overflow vulnerability in the DnsServer component.Check if you run itEPSS 0.43%Mar 15, 2026
- High7.0arduino-TuyaOpen before version 1.2.1 contains an out-of-bounds memory read vulnerability in the TuyaIoT component.Check if you run itEPSS 0.24%Mar 15, 2026
- High8.6arduino-TuyaOpen before version 1.2.1 contains a single-byte buffer overflow vulnerability in the WiFiMulti component.Check if you run itEPSS 0.21%Mar 15, 2026
- Medium5.1ZKTeco ZKAccess Security System 5.3.1 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting malicious paCheck if you run itEPSS 0.29%Mar 15, 2026
- Medium6.8ZKTeco ZKBioSecurity 3.0 contains a local authorization bypass vulnerability in visLogin.jsp that allows attackers to authenticate without valid credentials by spoofing localhost rCheck if you run itEPSS 0.17%Mar 15, 2026
- Critical9.3ZKTeco ZKBioSecurity 3.0 contains a user enumeration vulnerability that allows unauthenticated attackers to discover valid usernames by submitting partial characters via the usernaCheck if you run itEPSS 0.62%Mar 15, 2026
- Medium6.9ZKTeco ZKBioSecurity 3.0 contains a file path manipulation vulnerability that allows attackers to access arbitrary files by modifying file paths used to retrieve local resources.Check if you run itEPSS 0.23%Mar 15, 2026
- Medium5.3ZKTeco ZKBioSecurity 3.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by tricking logged-in users into visiting malicCheck if you run itEPSS 0.23%Mar 15, 2026
- Medium5.1ZKTeco ZKBioSecurity 3.0 contains multiple reflected cross-site scripting vulnerabilities that allow attackers to execute arbitrary HTML and script code by injecting malicious paylCheck if you run itEPSS 0.28%Mar 15, 2026
Sort