Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Multiple SUID root-owned binaries are found in /home/monitor/terminal, /home/monitor/kore-terminal, /home/monitor/IDE-DPack/terminal-dpack, and /home/monitor/IDE-DPack/terminal-dpaCheck if you run itEPSS 0.14%Mar 5, 2026
- High8.6A SUID root-owned binary in /home/xd/terminal/XDTerminal in International Data Casting (IDC) SFX2100 on Linux allows a local actor to potentially preform local privilege escalationCheck if you run itEPSS 0.14%Mar 5, 2026
- High8.3International Data Casting (IDC) SFX2100 satellite receiver comes with the utility installed with the setuid bit set.Check if you run itEPSS 0.16%Mar 5, 2026
- High8.3International Data Casting (IDC) SFX2100 satellite receiver comes with the utility installed with the setuid bit set.Check if you run itEPSS 0.17%Mar 5, 2026
- High7.5Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to access application functionality without reCheck if you run itEPSS 0.48%Mar 5, 2026
- High8.1A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset passwords of arbCheck if you run itEPSS 0.32%Mar 5, 2026
- High8.8An authorization bypass vulnerability in Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to escalate privileges across role boundaries via crafted reqCheck if you run itEPSS 0.45%Mar 5, 2026
- Medium5.4Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via the News function.Check if you run itEPSS 0.43%Mar 5, 2026
- High8.8An issue in Aranda Service Desk Web Edition (ASDK API 8.6) allows authenticated attackers to achieve remote code execution due to improper validation of uploaded files.Check if you run itEPSS 0.70%Mar 5, 2026
- High7.5An observable timing discrepancy in @perfood/couch-auth v0.26.0 allows attackers to access sensitive information via a timing side-channel.Check if you run itEPSS 0.42%Mar 5, 2026
- Critical9.3A host header injection vulnerability in the mailer component of @perfood/couch-auth v0.26.0 allows attackers to obtain reset tokens and execute an account takeover via spoofing thCheck if you run itEPSS 0.40%Mar 5, 2026
- High7.8A stack buffer overflow vulnerability exists in the Wincor Nixdorf wnBios64.sys kernel driver (version 1.2.0.0) in the IOCTL handler for code 0x80102058.Check if you run itEPSS 0.27%Mar 5, 2026
- High8.1OpenCode Systems OC Messaging / USSD Gateway OC Release 6.32.2 contains a broken access control vulnerability in the web-based control panel allowing authenticated low-privileged aCheck if you run itEPSS 0.30%Mar 5, 2026
- Critical9.8Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetEnableWizard.Check if you run itEPSS 0.76%Mar 5, 2026
- Critical9.8Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetMACFilter.Check if you run itEPSS 0.76%Mar 5, 2026
- Critical9.8D-Link DIR-513 version 1.10 contains a critical-level vulnerability.Check if you run itEPSS 0.80%Mar 5, 2026
- Critical9.8Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetDDNS.Check if you run itEPSS 0.94%Mar 5, 2026
- Critical9.8Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSchedule.Check if you run itEPSS 0.76%Mar 5, 2026
- High8.2python-markdown: denial of service via malformed HTML-like sequencesCheck if you run itEPSS 0.66%Mar 5, 2026
- High7.5An Arbitrary File Read vulnerability exists in the ImageTextPromptValue class in Exploding Gradients RAGAS v0.2.3 to v0.2.14.Check if you run itEPSS 0.61%Mar 5, 2026
- Critical9.8An issue in D-Link DIR-1253 MESH V1.6.1684 allows an attacker to escalate privileges via the etc/shadow.sample componentCheck if you run itEPSS 0.74%Mar 5, 2026
- Medium5.8Fonoster 0.5.5 before 0.6.1 allows ../ directory traversal to read arbitrary files via the /sounds/:file or /tts/:file VoiceServer endpoint.Check if you run itEPSS 2.40%Mar 5, 2026
- High8.4A cache poisoning vulnerability has been found in the Pingora HTTP proxy framework’s default cache key construction.Check if you run itEPSS 0.40%Mar 4, 2026
- Critical9.3An HTTP Request Smuggling vulnerability (CWE-444) has been found in Pingora's parsing of HTTP/1.0 and Transfer-Encoding requests.Check if you run itEPSS 0.89%Mar 4, 2026
- Medium5.3ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability.Check if you run itEPSS 0.22%Mar 4, 2026
Sort