Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3A vulnerability was detected in TRENDnet TEW-632BRP 1.010B32.Check if you run itEPSS 0.88%Mar 16, 2026
- High8.9A weakness has been identified in Topsec TopACM 3.0.Check if you run itEPSS 4.49%Mar 16, 2026
- High8.9A flaw has been found in Wavlink WL-WN578W2 221110.Check if you run itEPSS 3.71%Mar 16, 2026
- High8.9A vulnerability was detected in Wavlink WL-WN579A3 220323.Check if you run itEPSS 3.71%Mar 16, 2026
- High7.3Unraid Authentication Request Path Traversal Authentication Bypass Vulnerability.Check if you run itEPSS 0.88%Mar 16, 2026
- High8.8Unraid Update Request Path Traversal Remote Code Execution Vulnerability.Check if you run itEPSS 1.44%Mar 16, 2026
- High8.0Philips Hue Bridge hk_hap characteristics Heap-based Buffer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 0.73%Mar 16, 2026
- Medium5.3Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/pets/print-tags'.Check if you run itEPSS 0.45%Mar 16, 2026
- High7.1Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/hospitalization/generate-hospitalization-summary'.Check if you run itEPSS 0.38%Mar 16, 2026
- High7.1Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/centro/equipo/empleado'.Check if you run itEPSS 0.38%Mar 16, 2026
- High8.6Identity based authorization bypass vulnerability (IDOR) that allows an attacker to modify the data of a legitimate user account, such as changing the victim's email a…Check if you run itEPSS 0.39%Mar 16, 2026
- High8.8Runtipi is a personal homeserver orchestrator.Check if you run itEPSS 0.53%Mar 16, 2026
- Low2.7AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.Check if you run itEPSS 0.34%Mar 16, 2026
- High7.5AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.Check if you run itEPSS 0.42%Mar 16, 2026
- High8.2Pigeon is a message board/notepad/social system/blog.Check if you run itEPSS 0.34%Mar 16, 2026
- Medium6.9Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.49%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to sanitize client-supplied post metadata which allows an authenticated attacker to sp…Check if you run itEPSS 0.11%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly validate User-Agent header tokens which allows an authenticated attacker t…Check if you run itEPSS 0.38%Mar 16, 2026
- Medium6.9Raytha CMS does not have any brute force protection mechanism implemented.Check if you run itEPSS 0.39%Mar 16, 2026
- High7.5Raytha CMS allows an attacker to spoof or headers to attacker controlled domain.Check if you run itEPSS 0.15%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature.Check if you run itEPSS 0.25%Mar 16, 2026
- Medium6.9Raytha CMS is vulnerable to Cross-Site Request Forgery across multiple endpoints.Check if you run itEPSS 0.12%Mar 16, 2026
- High8.7Telesquare SKT LTE Router SDT-CS3B1 software version 1.2.0 contains an unauthenticated remote reboot vulnerability that allows attackers to trigger device reboot witho…Check if you run itEPSS 0.72%Mar 16, 2026
- Medium5.3Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains a cross-site request forgery vulnerability that allows authenticated attackers to execute arbitrary system c…Check if you run itEPSS 0.29%Mar 16, 2026
- High8.7Serviio PRO 1.8 contains an improper access control vulnerability in the Configuration REST API that allows unauthenticated attackers to change the mediabrowser login password.Check if you run itEPSS 0.40%Mar 16, 2026