Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8A buffer overflow vulnerability was discovered in goform/formSetMacFilterCfg in Tenda AC15V1.0 V15.03.05.18_multi.Check if you run itEPSS 0.48%Mar 3, 2026
- Critical9.8renren-secuity before v5.5.0 is vulnerable to SQL Injection in the BaseServiceImpl.java componentCheck if you run itEPSS 0.46%Mar 3, 2026
- Critical9.8Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWANType_Wizard5.Check if you run itEPSS 0.67%Mar 3, 2026
- Critical9.8Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWAN_Wizard51.Check if you run itEPSS 0.82%Mar 3, 2026
- Critical9.8Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWAN_Wizard55.Check if you run itEPSS 0.73%Mar 3, 2026
- Critical9.8Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetPortTr.Check if you run itEPSS 0.81%Mar 3, 2026
- Critical9.8Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetDomainFilter.Check if you run itEPSS 0.67%Mar 3, 2026
- Critical9.8Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetQoS.Check if you run itEPSS 0.81%Mar 3, 2026
- High7.5Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formGetIptv function and the list parameter, which can cause memory corruption and enable remote code execution.Check if you run itEPSS 0.83%Mar 3, 2026
- High7.2Multiple authenticated OS command injection vulnerabilities exist in the Cohesity (formerly Stone Ram) TranZman 4.0 Build 14614 through TZM_1757588060_SEP2025_FULL.depot web applicCheck if you run itEPSS 4.09%Mar 3, 2026
- Critical9.1A path traversal vulnerability exists in the ZIP extraction API of Zdir Pro 4.x.Check if you run itEPSS 0.60%Mar 3, 2026
- High7.1An issue in the WiseDelfile64.sys component of WiseCleaner Wise Force Deleter 7.3.2 and earlier allows attackers to delete arbitrary files via a crafted request.Check if you run itEPSS 0.24%Mar 3, 2026
- High7.5An issue was discovered in LBS in Samsung Mobile Processor Exynos 2200.Check if you run itEPSS 0.56%Mar 3, 2026
- High7.5Cohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to use a weak cryptography algorithm for data encryption, allowing attackers to trivially reverse the eCheck if you run itEPSS 0.14%Mar 3, 2026
- High7.2Cohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to contain an authenticated command injection vulnerability.Check if you run itEPSS 2.58%Mar 3, 2026
- High7.2An authenticated arbitrary file upload vulnerability in Cohesity TranZman Migration Appliance Release 4.0 Build 14614 allows attackers with Administrator privileges to execute arbiCheck if you run itEPSS 0.40%Mar 3, 2026
- High7.8Incorrect access control in the component /opt/SRLtzm/bin/TapeDumper of Cohesity TranZman Migration Appliance Release 4.0 Build 14614 allows attackers to escalate privileges to rooCheck if you run itEPSS 0.37%Mar 3, 2026
- High7.5An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, and 2500.Check if you run itEPSS 0.33%Mar 3, 2026
- Medium5.5An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, and 2500.Check if you run itEPSS 0.12%Mar 3, 2026
- Medium5.5An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, 1580, and 2500.Check if you run itEPSS 0.17%Mar 3, 2026
- High7.5An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, and 2400.Check if you run itEPSS 0.56%Mar 3, 2026
- Critical9.8An issue in Step-Video-T2V allows a remote attacker to execute arbitrary code via the /vae-api , /caption-api , feature = pickle.loads(request.get_data()) componentCheck if you run itEPSS 0.58%Mar 3, 2026
- High7.8A command injection vulnerability in the szc script of the ccurtsinger/stabilizer repository allows remote attackers to execute arbitrary system commands via unsanitized user inputCheck if you run itEPSS 0.60%Mar 3, 2026
- High7.5Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the component uac_temp.db.Check if you run itEPSS 0.24%Mar 3, 2026
- Critical9.8An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to execute arbitrary commands via supplying a crafted GET rCheck if you run itEPSS 0.40%Mar 3, 2026
Sort