Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7A vulnerability has been found in Belkin F9K1015 1.00.10.Check if you run itEPSS 0.70%Apr 6, 2026
- High8.7A flaw has been found in Tenda i12 1.0.0.11(3862).Check if you run itEPSS 0.64%Apr 6, 2026
- High8.7A vulnerability was detected in Belkin F9K1122 1.00.33.Check if you run itEPSS 0.74%Apr 6, 2026
- Medium5.3A security vulnerability has been detected in imprvhub mcp-browser-agent up to 0.8.0.Check if you run itEPSS 0.27%Apr 6, 2026
- Medium5.3A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1.Check if you run itEPSS 0.26%Apr 6, 2026
- High8.7LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.Patch nowKEVEPSS 38.61%Apr 6, 2026
- Medium5.4Multiple authenticated stored cross-site scripting (XSS) vulnerabilities in the Permissions module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML viaCheck if you run itEPSS 0.22%Apr 6, 2026
- Medium5.4An authenticated stored cross-site scripting (XSS) vulnerability in the Category module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injectingCheck if you run itEPSS 0.18%Apr 6, 2026
- Medium5.4An authenticated stored cross-site scripting (XSS) vulnerability in the Role Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injCheck if you run itEPSS 0.22%Apr 6, 2026
- Medium4.8An authenticated stored cross-site scripting (XSS) vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via inCheck if you run itEPSS 0.19%Apr 6, 2026
- Medium5.4An authenticated stored cross-site scripting (XSS) vulnerability in Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload intoCheck if you run itEPSS 0.18%Apr 6, 2026
- Medium5.4An authenticated stored cross-site scripting (XSS) vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via inCheck if you run itEPSS 0.14%Apr 6, 2026
- Medium5.4A stored cross-site scripting (XSS) vulnerability in Bynder before 12 January 2026 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.Check if you run itEPSS 0.14%Apr 6, 2026
- Critical9.8An issue in the login mechanism of Kaleris YMS v7.2.2.1 allows attackers to bypass login verification to access the application 's resources.Check if you run itEPSS 0.40%Apr 6, 2026
- Medium4.3Incorrect access control in Kaleris YMS v7.2.2.1 allows authenticated attackers with only the shipping/receiving role to view the truck's dashboard resources.Check if you run itEPSS 0.21%Apr 6, 2026
- Medium6.8A remote command execution (RCE) vulnerability in the /goform/formReleaseConnect component of UTT Aggressive 520W v3v1.7.7-180627 allows attackers to execute arbitrary commands viaCheck if you run itEPSS 0.48%Apr 6, 2026
- Medium4.5UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the selDateType parameter of the formTaskEdit function.Check if you run itEPSS 0.25%Apr 6, 2026
- Medium4.5UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the addCommand parameter of the formConfigCliForEngineerOnly function.Check if you run itEPSS 0.24%Apr 6, 2026
- Medium4.5UTT Aggressive HiPER 1200GW v2.5.3-170306 was discovered to contain a buffer overflow in the pools parameter of the formArpBindConfig function.Check if you run itEPSS 0.25%Apr 6, 2026
- Medium4.5UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the filename parameter of the formFtpServerDirConfig function.Check if you run itEPSS 0.24%Apr 6, 2026
- Medium4.5UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the timestart parameter of the ConfigAdvideo function.Check if you run itEPSS 0.24%Apr 6, 2026
- Medium4.5UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the notes parameter of the formGroupConfig function.Check if you run itEPSS 0.26%Apr 6, 2026
- Critical9.8A remote command execution (RCE) vulnerability in the /goform/formDia component of UTT Aggressive HiPER 520W v3v1.7.7-180627 allows attackers to execute arbitrary commands via a crCheck if you run itEPSS 0.94%Apr 6, 2026
- Medium4.5UTT Aggressive HiPER 1200GW v2.5.3-170306 was discovered to contain a buffer overflow in the timeRangeName parameter of the formConfigDnsFilterGlobal function.Check if you run itEPSS 0.26%Apr 6, 2026
- Medium6.2A double free vulnerability exists in librz/bin/format/le/le.c in the function le_load_fixup_record().Check if you run itEPSS 0.15%Apr 6, 2026
Sort