Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Incorrect access control in the VNC component of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to access the HMI system.Check if you run itEPSS 0.35%Mar 3, 2026
- Critical9.8An authentication bypass vulnerability in the authorization mechanism of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to perform Administrative aCheck if you run itEPSS 0.42%Mar 3, 2026
- Medium5.3Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded encryption key which could allow attackers to access sensitive information.Check if you run itEPSS 0.19%Mar 3, 2026
- High8.8Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain an authenticated command injection vulnerability via the HMI Name parameter.Check if you run itEPSS 1.49%Mar 3, 2026
- High7.5Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded password in the FTP protocol.Check if you run itEPSS 0.39%Mar 3, 2026
- Critical9.8A command injection vulnerability in the DHCP activation feature of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows attackers to execute arbitrary commands witCheck if you run itEPSS 1.84%Mar 3, 2026
- High7.5Incorrect access control in the component download_wb.cgi of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows unauthenticated attack to download arbitrary filesCheck if you run itEPSS 0.34%Mar 3, 2026
- High8.8An issue was discovered in Nokia Impact before Mobile 23_FP1.Check if you run itEPSS 0.28%Mar 3, 2026
- High8.1A Cross-Site Request Forgery (CSRF) vulnerability in Nokia IMPACT through 19.11.2.10-20210118042150283 allows a remote attacker to import and overwrite the entire application confiCheck if you run itEPSS 0.22%Mar 3, 2026
- High8.0The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload server-side executable files via the /ui/Check if you run itEPSS 0.25%Mar 3, 2026
- High8.2Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform a Time-based Boolean Blind SQL Injection attack on the endpoint /ui/rest-proxy/campaign/stCheck if you run itEPSS 0.27%Mar 3, 2026
- Medium4.1The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload JavaScript files via the /ui/rest-proxy/aCheck if you run itEPSS 0.24%Mar 3, 2026
- High8.8The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to, and includiCheck if you run itEPSS 0.34%Mar 2, 2026
- Medium5.3The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on theCheck if you run itEPSS 0.36%Mar 2, 2026
- Medium6.4The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the metadata fields in all versions up to, and including, 2.1.30 due to insufficient input sanitizaCheck if you run itEPSS 0.22%Mar 2, 2026
- Medium6.5A command injection vulnerability in ModelScope's ms-agent versions v1.6.0rc1 and earlier exists, allowing an attacker to execute arbitrary operating system commands through crafteCheck if you run itEPSS 2.05%Mar 2, 2026
- Low2.7Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.Check if you run itEPSS 0.37%Mar 2, 2026
- Low2.7Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.Check if you run itEPSS 0.42%Mar 2, 2026
- Low2.7Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.Check if you run itEPSS 0.29%Mar 2, 2026
- High8.4theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands.Check if you run itEPSS 0.20%Mar 2, 2026
- High8.8AFFiNE is an open-source, all-in-one workspace and an operating system.Check if you run itEPSS 0.71%Mar 2, 2026
- High8.4In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confused deputy.Check if you run itEPSS 0.17%Mar 2, 2026
- Medium6.2In setHideSensitive of ExpandableNotificationRow.java, there is a possible contact name leak due due to a logic error in the code.Check if you run itEPSS 0.12%Mar 2, 2026
- High8.4In enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access from working due to a logic error in the code.Check if you run itEPSS 0.14%Mar 2, 2026
- Medium6.9AFFiNE is an open-source, all-in-one workspace and an operating system.Check if you run itEPSS 0.20%Mar 2, 2026
Sort