Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Centova Cast 3.2.12 contains a denial of service vulnerability that allows attackers to overwhelm the system by repeatedly calling the database export API endpoint.Check if you run itEPSS 0.48%Feb 12, 2026
- Medium6.7iNetTools for iOS 8.20 contains a denial of service vulnerability in the Whois feature that allows attackers to crash the application by manipulating input.Check if you run itEPSS 0.36%Feb 12, 2026
- Medium6.7SpotAuditor 5.3.2 contains a denial of service vulnerability in its Base64 decryption feature that allows attackers to crash the application by supplying an oversized buffer.Check if you run itEPSS 0.50%Feb 12, 2026
- Medium6.7GHIA CamIP 1.2 for iOS contains a denial of service vulnerability in the password input field that allows attackers to crash the application.Check if you run itEPSS 0.34%Feb 12, 2026
- Medium6.9DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset functionality that allows attackers to identify valid user accounts.Check if you run itEPSS 0.48%Feb 12, 2026
- Medium5.3OwnCloud 8.1.8 contains a username enumeration vulnerability that allows remote attackers to discover user accounts by manipulating the share.php endpoint.Check if you run itEPSS 0.48%Feb 12, 2026
- High8.4SpotAuditor 5.3.2 contains a local buffer overflow vulnerability in the Base64 Encrypted Password tool that allows attackers to execute arbitrary code by crafting a malicious payloCheck if you run itEPSS 0.25%Feb 12, 2026
- Medium6.7Product Key Explorer 4.2.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by overflowing the registration name input field.Check if you run itEPSS 0.23%Feb 12, 2026
- High8.7Bullwark Momentum Series JAWS 1.0 contains a directory traversal vulnerability that allows unauthenticated attackers to access system files by manipulating HTTP request paths.Check if you run itEPSS 0.76%Feb 12, 2026
- High8.4FTP Commander Pro 8.03 contains a local stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting the EIP register through a custom command input.Check if you run itEPSS 0.30%Feb 12, 2026
- High8.4AVS Audio Converter 9.1 contains a local buffer overflow vulnerability that allows local attackers to overwrite CPU registers by manipulating the 'Exit folder' input field.Check if you run itEPSS 0.17%Feb 12, 2026
- Medium6.7SurfOffline Professional 2.2.0.103 contains a structured exception handler (SEH) overflow vulnerability that allows attackers to crash the application by manipulating the project nCheck if you run itEPSS 0.37%Feb 12, 2026
- Medium6.7FTP Navigator 8.03 contains a denial of service vulnerability that allows attackers to crash the application by overwriting Structured Exception Handler (SEH) with malicious input.Check if you run itEPSS 0.51%Feb 12, 2026
- Medium6.7XnConvert 1.82 contains a denial of service vulnerability in its registration code input field that allows attackers to crash the application.Check if you run itEPSS 0.37%Feb 12, 2026
- High8.4Prime95 version 29.8 build 6 contains a buffer overflow vulnerability in the user ID input field that allows remote attackers to execute arbitrary code.Check if you run itEPSS 0.54%Feb 12, 2026
- High8.8Thrive Smart Home 1.1 contains an SQL injection vulnerability in the checklogin.php endpoint that allows unauthenticated attackers to bypass authentication by manipulating the 'useCheck if you run itEPSS 0.37%Feb 12, 2026
- Medium5.1RICOH Web Image Monitor 1.09 contains an HTML injection vulnerability in the address configuration CGI script that allows attackers to inject malicious HTML code.Check if you run itEPSS 0.27%Feb 12, 2026
- Medium5.1Heatmiser Netmonitor v3.03 contains an HTML injection vulnerability in the outputSetup.htm page that allows attackers to inject malicious HTML code through the outputtitle parameteCheck if you run itEPSS 0.27%Feb 12, 2026
- Critical9.3Heatmiser Netmonitor 3.03 contains a hardcoded credentials vulnerability in the networkSetup.htm page with predictable admin login credentials.Check if you run itEPSS 0.33%Feb 12, 2026
- High8.4FTP Navigator 8.03 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) registers.Check if you run itEPSS 0.79%Feb 12, 2026
- High8.8E Learning Script 1.0 contains an authentication bypass vulnerability that allows attackers to access the dashboard without valid credentials by manipulating login parameters.Check if you run itEPSS 0.35%Feb 12, 2026
- High8.4Domain Quester Pro 6.02 contains a stack overflow vulnerability that allows remote attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) registers.Check if you run itEPSS 0.54%Feb 12, 2026
- High8.4AVS Audio Converter 9.1.2.600 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by manipulating the output folder text input.Check if you run itEPSS 0.35%Feb 12, 2026
- Critical9.3emp3r0r is a stealth-focused C2 designed by Linux users for Linux environments.Check if you run itEPSS 3.74%Feb 12, 2026
- High8.5Intego Log Reporter, a macOS diagnostic utility bundled with Intego security products that collects system and application logs for support analysis, contains a local privilege escCheck if you run itEPSS 0.13%Feb 12, 2026
Sort