Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7DBPower C300 HD Camera contains a configuration disclosure vulnerability that allows unauthenticated attackers to retrieve sensitive credentials through an unprotected configuratioCheck if you run itEPSS 0.44%Feb 6, 2026
- Medium6.7Core FTP Lite 1.3 contains a buffer overflow vulnerability in the username input field that allows attackers to crash the application by supplying oversized input.Check if you run itEPSS 0.43%Feb 6, 2026
- High7.1eLection 2.0 contains an authenticated SQL injection vulnerability in the candidate management endpoint that allows attackers to manipulate database queries through the 'id' parameCheck if you run itEPSS 0.50%Feb 6, 2026
- High7.0ATutor 2.2.4 contains a SQL injection vulnerability in the admin user deletion page that allows authenticated attackers to manipulate database queries through the 'id' parameter.Check if you run itEPSS 0.31%Feb 6, 2026
- High8.7ACE Security WiP-90113 HD Camera contains a configuration disclosure vulnerability that allows unauthenticated attackers to retrieve sensitive configuration files.Check if you run itEPSS 0.46%Feb 6, 2026
- High8.8AMSS++ version 4.31 contains a SQL injection vulnerability in the mail module's maildetail.php script through the 'id' parameter.Check if you run itEPSS 0.32%Feb 6, 2026
- Critical9.3AMSS++ 4.7 contains an authentication bypass vulnerability that allows attackers to access administrative accounts using hardcoded credentials.Check if you run itEPSS 0.47%Feb 6, 2026
- Medium6.7SpotFTP-FTP Password Recover 2.4.8 contains a denial of service vulnerability that allows attackers to crash the application by generating a large buffer overflow.Check if you run itEPSS 0.44%Feb 6, 2026
- Medium6.7aSc TimeTables 2020.11.4 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the Subject title field with a large buffer.Check if you run itEPSS 0.40%Feb 6, 2026
- Medium6.7Core FTP LE 2.2 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the account field with a large buffer.Check if you run itEPSS 0.41%Feb 6, 2026
- Medium5.1Business Live Chat Software 1.0 contains a cross-site request forgery vulnerability that allows attackers to change user account roles without authentication.Check if you run itEPSS 0.20%Feb 6, 2026
- High8.4Cyberoam Authentication Client 2.1.2.7 contains a buffer overflow vulnerability that allows remote attackers to execute arbitrary code by overwriting Structured Exception Handler (Check if you run itEPSS 0.74%Feb 6, 2026
- High8.0Antrea is a Kubernetes networking solution intended to be Kubernetes native.Check if you run itEPSS 0.49%Feb 6, 2026
- High7.6Nebula is a scalable overlay networking tool.Check if you run itEPSS 0.14%Feb 6, 2026
- Critical9.83DP-MANAGER is an inbound generator for 3x-ui.Check if you run itEPSS 0.40%Feb 6, 2026
- High7.5AdonisJS is a TypeScript-first web framework.Check if you run itEPSS 0.53%Feb 6, 2026
- High7.2AdonisJS is a TypeScript-first web framework.Check if you run itEPSS 0.42%Feb 6, 2026
- High7.3vim: Vim: Arbitrary code execution via 'helpfile' option processingCheck if you run itEPSS 0.26%Feb 6, 2026
- High7.5DataHub is an open-source metadata platform.Check if you run itEPSS 0.34%Feb 6, 2026
- High7.7Spree is an open source e-commerce solution built with Ruby on Rails.Check if you run itEPSS 0.49%Feb 6, 2026
- High8.7A vulnerability has been found in UTT 进取 520W 1.7.7-180627.Check if you run itEPSS 0.78%Feb 6, 2026
- Critical9.4OpenProject is an open-source, web-based project management software.Check if you run itEPSS 0.51%Feb 6, 2026
- Low3.5OpenProject is an open-source, web-based project management software.Check if you run itEPSS 0.27%Feb 6, 2026
- Medium4.8A flaw has been found in ggml-org llama.cpp up to 55abc39.Check if you run itEPSS 0.15%Feb 6, 2026
- Critical9.1The Agentspace service was affected by a vulnerability that exposed sensitive information due to the use of predictable Google Cloud Storage bucket names.Check if you run itEPSS 0.30%Feb 6, 2026
Sort