Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.4A vulnerability was found in D-Link DWR-M960 1.01.07.Check if you run itEPSS 4.06%Feb 23, 2026
- High7.4A vulnerability has been found in D-Link DWR-M960 1.01.07.Check if you run itEPSS 3.97%Feb 23, 2026
- High7.4A flaw has been found in D-Link DWR-M960 1.01.07.Check if you run itEPSS 0.83%Feb 23, 2026
- High7.4A vulnerability was detected in D-Link DWR-M960 1.01.07.Check if you run itEPSS 0.76%Feb 23, 2026
- High7.4A security vulnerability has been detected in D-Link DWR-M960 1.01.07.Check if you run itEPSS 0.80%Feb 23, 2026
- Critical9.1Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems.Check if you run itEPSS 0.39%Feb 23, 2026
- Medium6.1Stored Cross-Site Scripting (XSS) was found in the /admin/edit_user.php page of Society Management System Portal V1.0, which allows remote attackers to inject and store arbitrary JCheck if you run itEPSS 0.29%Feb 23, 2026
- High8.8TOTOLINK X6000R v9.4.0cu.1498_B20250826 contains an OS command injection vulnerability in the NTPSyncWithHost handler of the /usr/sbin/shttpd executable.Check if you run itEPSS 2.04%Feb 23, 2026
- Critical9.8TOTOLINK X5000R v9.1.0cu_2415_B20250515 contains an argument injection vulnerability in the setDiagnosisCfg handler of the /usr/sbin/lighttpd executable.Check if you run itEPSS 0.80%Feb 23, 2026
- High7.4An issue pertaining to CWE-295: Improper Certificate Validation was discovered in YMFE yapi v1.12.0.Check if you run itEPSS 0.19%Feb 23, 2026
- Medium5.5libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.Check if you run itEPSS 0.16%Feb 23, 2026
- Critical9.8libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.Check if you run itEPSS 0.30%Feb 23, 2026
- Medium5.5libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.Check if you run itEPSS 0.14%Feb 23, 2026
- Low2.1A weakness has been identified in qinming99 dst-admin up to 1.5.0.Check if you run itEPSS 0.43%Feb 22, 2026
- Low2.1A security flaw has been discovered in qinming99 dst-admin up to 1.5.0.Check if you run itEPSS 8.90%Feb 22, 2026
- Low2.1A vulnerability was found in Dromara UJCMS 10.0.2.Check if you run itEPSS 0.38%Feb 22, 2026
- High8.8Web Ofisi Rent a Car v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'klima' paramCheck if you run itEPSS 0.30%Feb 22, 2026
- High8.8Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' pCheck if you run itEPSS 0.42%Feb 22, 2026
- High8.8Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' GCheck if you run itEPSS 0.42%Feb 22, 2026
- High8.8Web Ofisi Emlak V2 contains multiple SQL injection vulnerabilities in the endpoint that allow unauthenticated attackers to manipulate database queries through GET parameters.Check if you run itEPSS 0.50%Feb 22, 2026
- High8.8Web Ofisi Firma Rehberi v1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through GET parametersCheck if you run itEPSS 0.56%Feb 22, 2026
- High8.8Web Ofisi Firma v13 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'oz' array parameCheck if you run itEPSS 0.46%Feb 22, 2026
- High8.8Web Ofisi Emlak v2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'ara' GET parameteCheck if you run itEPSS 0.54%Feb 22, 2026
- High8.8Web Ofisi E-Ticaret v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'a' parameter.Check if you run itEPSS 0.46%Feb 22, 2026
- Medium5.3A vulnerability has been found in Dromara UJCMS 101.2.Check if you run itEPSS 0.88%Feb 22, 2026
Sort