Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A security flaw has been discovered in Wavlink WL-WN579A3 up to 20210219.Check if you run itEPSS 9.32%Feb 16, 2026
- Medium5.3A vulnerability was identified in Wavlink WL-WN579A3 up to 20210219.Check if you run itEPSS 9.07%Feb 16, 2026
- Medium5.3A vulnerability was determined in Wavlink WL-WN579A3 up to 20210219.Check if you run itEPSS 9.32%Feb 16, 2026
- Medium5.3A vulnerability was found in Wavlink WL-WN579A3 up to 20210219.Check if you run itEPSS 9.04%Feb 16, 2026
- Medium6.9A vulnerability has been found in Free5GC up to 4.1.0.Check if you run itEPSS 0.59%Feb 16, 2026
- Medium6.9A flaw has been found in Open5GS 2.7.6.Check if you run itEPSS 0.68%Feb 16, 2026
- Medium6.9A vulnerability was detected in Open5GS up to 2.7.6.Check if you run itEPSS 0.62%Feb 16, 2026
- Medium4.3An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page.Check if you run itEPSS 0.64%Feb 16, 2026
- High8.8An issue in Visual Studio Code Extensions Markdown Preview Enhanced v0.8.18 allows attackers to execute arbitrary code via uploading a crafted .Md file.Check if you run itEPSS 0.84%Feb 16, 2026
- High7.8An issue in the code-runner.executorMap setting of Visual Studio Code Extensions Code Runner v0.12.2 allows attackers to execute arbitrary code when opening a crafted workspace.Check if you run itEPSS 0.40%Feb 16, 2026
- Medium6.9A security vulnerability has been detected in Open5GS up to 2.7.6.Check if you run itEPSS 0.65%Feb 15, 2026
- Medium6.9A weakness has been identified in Open5GS up to 2.7.6.Check if you run itEPSS 0.75%Feb 15, 2026
- High8.7eNet SMART HOME server 2.2.1 and 2.3.1 contains a missing authorization vulnerability in the resetUserPassword JSON-RPC method that allows any authenticated low-privileged user (UGCheck if you run itEPSS 0.57%Feb 15, 2026
- High7.1eNet SMART HOME server 2.2.1 and 2.3.1 contains a missing authorization vulnerability in the deleteUserAccount JSON-RPC method that permits any authenticated low-privileged user (UCheck if you run itEPSS 0.41%Feb 15, 2026
- Critical9.3eNet SMART HOME server 2.2.1 and 2.3.1 ships with default credentials (user:user, admin:admin) that remain active after installation and commissioning without enforcing a mandatoryCheck if you run itEPSS 0.71%Feb 15, 2026
- Medium4.8OPNsense 19.1 contains a reflected cross-site scripting vulnerability in the system_advanced_sysctl.php endpoint that allows attackers to inject malicious scripts via the value parCheck if you run itEPSS 0.28%Feb 15, 2026
- Medium5.1OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted payloads through the iCheck if you run itEPSS 0.41%Feb 15, 2026
- Medium5.1OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted input to the mailserveCheck if you run itEPSS 0.41%Feb 15, 2026
- Medium5.1OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by exploiting the passthrough_networks parameter in vpn_ipseCheck if you run itEPSS 0.36%Feb 15, 2026
- Medium5.1OPNsense 19.1 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input to the category paramCheck if you run itEPSS 0.24%Feb 15, 2026
- Medium5.1OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by exploiting insufficient input validationCheck if you run itEPSS 0.29%Feb 15, 2026
- Medium5.1OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by exploiting insufficient input validationCheck if you run itEPSS 0.29%Feb 15, 2026
- Medium5.1OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input through multiple parameters.Check if you run itEPSS 0.28%Feb 15, 2026
- Medium5.1OPNsense 19.1 contains a stored cross-site scripting vulnerability in the system_advanced_sysctl.php endpoint that allows attackers to inject persistent malicious scripts via the tCheck if you run itEPSS 0.24%Feb 15, 2026
- Medium4.8OPNsense 19.1 contains multiple cross-site scripting vulnerabilities in the diag_backup.php endpoint that allow attackers to inject malicious scripts through multiple parameters inCheck if you run itEPSS 0.15%Feb 15, 2026
Sort