Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5Piwigo is an open source photo gallery application for the web.Check if you run itEPSS 0.83%Feb 24, 2026
- Low2.7Piwigo is an open source photo gallery application for the web.Check if you run itEPSS 0.30%Feb 24, 2026
- High8.8Privilege escalation and improper access control in GCOM EPON 1GE C00R371V00B01 allows remote authenticated users to modify administrator only settings and extract adm…Check if you run itEPSS 0.32%Feb 24, 2026
- High7.5NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.Check if you run itEPSS 0.54%Feb 24, 2026
- High8.6Multiple Finka programs use hard-coded Firebird database credentials (shared across all instances of this software).Check if you run itEPSS 0.14%Feb 24, 2026
- Medium5.7Download of Code Without Integrity Check vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5.Check if you run itEPSS 0.10%Feb 24, 2026
- Medium4.9A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall.Check if you run itEPSS 0.40%Feb 24, 2026
- Medium4.9A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.Check if you run itEPSS 0.40%Feb 24, 2026
- Medium4.9A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall.Check if you run itEPSS 0.49%Feb 24, 2026
- Medium4.9Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API endpoint.Check if you run itEPSS 0.37%Feb 24, 2026
- High7.5TOTOLINK X5000R V9.1.0cu.2415_B20250515 contains a denial-of-service vulnerability in /cgi-bin/cstecgi.cgi.Check if you run itEPSS 0.37%Feb 24, 2026
- Medium6.9Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior do not implement rate limiting or account lockout on failed login attempts, enabling brute-force attCheck if you run itEPSS 0.28%Feb 24, 2026
- High8.7Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 store a user password in a client-side cookie as a Base64-encoded value accessible via the web interCheck if you run itEPSS 0.22%Feb 24, 2026
- High8.7Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior use RC4 with a hard-coded key embedded in client-side JavaScript.Check if you run itEPSS 0.21%Feb 24, 2026
- Medium5.1Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior lack CSRF protections for state-changing actions in the administrative interface.Check if you run itEPSS 0.12%Feb 24, 2026
- Medium5.1Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior reflect unsanitized user input in the web interface, allowing an attacker to inject and execute arbiCheck if you run itEPSS 0.17%Feb 24, 2026
- High8.6Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior expose user passwords in plaintext within the administrative interface and HTTP responses, allowingCheck if you run itEPSS 0.20%Feb 24, 2026
- Critical9.3Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 generate predictable numeric session identifiers in the web management interface.Check if you run itEPSS 0.36%Feb 24, 2026
- Critical9.3Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain hard-coded administrative credentials that cannot be changed by users.Check if you run itEPSS 0.42%Feb 24, 2026
- High8.7Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain a command injection vulnerability in the traceroute diagnostic function of the affected deviCheck if you run itEPSS 1.39%Feb 24, 2026
- Critical9.2Actual is a local-first personal finance tool.Check if you run itEPSS 0.45%Feb 24, 2026
- High8.6WWBN AVideo is an open source video platform.Check if you run itEPSS 0.27%Feb 24, 2026
- Medium5.1WWBN AVideo is an open source video platform.Check if you run itEPSS 0.26%Feb 24, 2026
- Medium5.3A vulnerability was determined in exiftool up to 13.49 on macOS.Check if you run itEPSS 3.95%Feb 24, 2026
- Medium5.3A vulnerability was found in Intelbras TIP 635G 1.12.3.5.Check if you run itEPSS 6.63%Feb 24, 2026
Sort