Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In multiple locations, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode normalization.Check if you run itEPSS 0.12%Mar 2, 2026
- High8.4In UsageEvents of UsageEvents.java, there is a possible out of bounds write due to an incorrect bounds check.Check if you run itEPSS 0.09%Mar 2, 2026
- Medium6.5In multiple functions of btm_ble_sec.cc, there is a possible unencrypted communication due to Invalid error handling.Check if you run itEPSS 0.08%Mar 2, 2026
- Medium6.9Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TP-Link Deco BE25 v1.0 (web modules) allows authenticated adjacent atta…Check if you run itEPSS 0.31%Mar 2, 2026
- High8.5Improper input handling in the administration web interface on TP-Link Deco BE25 v1.0 allows crafted input to be executed as part of an OS command.Check if you run itEPSS 0.32%Mar 2, 2026
- Critical9.3Bytebase vulnerable to Improper AuthenticationCheck if you run itEPSS 0.61%Mar 2, 2026
- High7.5The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to blind SQL Injection via the ‘cgLostPasswordEmail’ and the ’cgl_maCheck if you run itEPSS 1.12%Mar 2, 2026
- High8.8The Master Addons for Elementor Premium plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.1.3 via the 'JLTMA_Widget_Admin::render_Check if you run itEPSS 0.69%Mar 2, 2026
- High7.8Memory Corruption when accessing buffers with invalid length during TA invocation.Check if you run itEPSS 0.08%Mar 2, 2026
- Medium6.5Transient DOS when an LTE RLC packet with invalid TB is received by UE.Check if you run itEPSS 0.11%Mar 2, 2026
- High7.8Memory Corruption when processing invalid user address with nonstandard buffer address.Check if you run itEPSS 0.08%Mar 2, 2026
- High7.8Memory Corruption when adding user-supplied data without checking available buffer space.Check if you run itEPSS 0.08%Mar 2, 2026
- High7.8Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.Check if you run itEPSS 0.08%Mar 2, 2026
- High7.8Memory Corruption when accessing trusted execution environment without proper privilege check.Check if you run itEPSS 0.08%Mar 2, 2026
- Medium6.5Transient DOS when MAC configures config id greater than supported maximum value.Check if you run itEPSS 0.11%Mar 2, 2026
- High7.2Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.Check if you run itEPSS 0.15%Mar 2, 2026
- High7.8Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs.Check if you run itEPSS 0.08%Mar 2, 2026
- High7.8Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.Check if you run itEPSS 0.08%Mar 2, 2026
- High7.1Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.Check if you run itEPSS 0.08%Mar 2, 2026
- High7.8Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.Check if you run itEPSS 0.08%Mar 2, 2026
- High7.8Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.Check if you run itEPSS 0.08%Mar 2, 2026
- High7.8Memory corruption while handling different IOCTL calls from the user-space simultaneously.Check if you run itEPSS 0.08%Mar 2, 2026
- High7.1ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.Check if you run itEPSS 0.27%Mar 2, 2026
- Critical9.9ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.Check if you run itEPSS 0.47%Mar 2, 2026
- Medium5.3NocoDB is software for building databases as spreadsheets.Check if you run itEPSS 0.21%Mar 2, 2026
Sort