Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3ZKTeco ZKBioSecurity 3.0 contains hardcoded credentials in the bundled Apache Tomcat server that allow unauthenticated attackers to access the manager application.Check if you run itEPSS 0.87%Mar 15, 2026
- High8.7ZKTeco ZKAccess Professional 3.5.3 contains an insecure file permissions vulnerability that allows authenticated users to escalate privileges by modifying executable files.Check if you run itEPSS 0.49%Mar 15, 2026
- Critical9.3ZKTeco ZKTime.Net 3.0.1.6 contains an insecure file permissions vulnerability that allows unprivileged users to escalate privileges by modifying executable files.Check if you run itEPSS 0.81%Mar 15, 2026
- Medium6.9A vulnerability was identified in D-Link DIR-816 1.10CNB05.Check if you run itEPSS 1.55%Mar 15, 2026
- Medium5.1A vulnerability was determined in Aureus ERP up to 1.3.0-BETA2.Check if you run itEPSS 0.29%Mar 15, 2026
- Medium4.8A vulnerability has been found in Radare2 5.9.9.Check if you run itEPSS 0.13%Mar 15, 2026
- High8.8A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the file at lines 161-167.Check if you run itEPSS 1.71%Mar 15, 2026
- Medium5.3A flaw has been found in CodePhiliaX Chat2DB up to 0.3.7.Check if you run itEPSS 0.27%Mar 15, 2026
- High8.6A vulnerability was detected in TRENDnet TEW-632BRP 1.010B32.Check if you run itEPSS 0.70%Mar 15, 2026
- Medium5.3A security vulnerability has been detected in CodeGenieApp serverless-express up to 4.17.1.Check if you run itEPSS 0.31%Mar 15, 2026
- Critical9.3A weakness has been identified in Topsec TopACM 3.0.Check if you run itEPSS 3.18%Mar 15, 2026
- Medium4.8A security flaw has been discovered in Tecnick TCExam up to 16.6.0.Check if you run itEPSS 0.24%Mar 15, 2026
- Medium4.8A vulnerability was identified in Tecnick TCExam 16.5.0.Check if you run itEPSS 0.31%Mar 15, 2026
- High8.7A vulnerability was determined in Belkin F9K1122 1.00.33.Check if you run itEPSS 0.52%Mar 15, 2026
- Medium5.1A vulnerability was found in Wavlink WL-NU516U1 240425.Check if you run itEPSS 0.24%Mar 15, 2026
- Medium4.8A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25.Check if you run itEPSS 0.23%Mar 15, 2026
- Critical9.3A flaw has been found in Wavlink WL-WN578W2 221110.Check if you run itEPSS 2.34%Mar 15, 2026
- Medium5.3The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to unauthorized modification of data dueCheck if you run itEPSS 0.22%Mar 15, 2026
- High7.5The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 9.1.9 via the submiCheck if you run itEPSS 0.30%Mar 15, 2026
- Medium4.3The Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and inclCheck if you run itEPSS 0.26%Mar 15, 2026
- High7.1A flaw was found in GNU Binutils.Check if you run itEPSS 0.21%Mar 15, 2026
- High7.1A flaw was found in GNU Binutils.Check if you run itEPSS 0.29%Mar 15, 2026
- Critical9.3A vulnerability was detected in Wavlink WL-WN579A3 220323.Check if you run itEPSS 2.39%Mar 14, 2026
- Medium6.1Issues in stm32 USB device driver (drivers/usb/device/usb_dc_stm32.c) can lead to an infinite while loop.Check if you run itEPSS 0.20%Mar 14, 2026
- Medium5.3Vulnogram 1.0.0 contains a stored cross-site scripting vulnerability in comment hypertext handling that allows attackers to inject malicious scripts.Check if you run itEPSS 0.31%Mar 14, 2026
Sort