Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.6An information disclosure vulnerability exists in AZIOT 1 Node Smart Switch (16amp)- WiFi/Bluetooth Enabled Software Version: 1.1.9 due to improper access control on the UART debugCheck if you run itEPSS 0.18%Apr 6, 2026
- High7.5OpenAirInterface V2.2.0 AMF crashes when it receives an NGAP message with invalid procedure code or invalid PDU-type.Check if you run itEPSS 0.30%Apr 6, 2026
- Critical9.8ninjaforms ninja_forms_file_uploads Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 62.90%Apr 6, 2026
- Medium6.1An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL.Check if you run itEPSS 0.18%Apr 6, 2026
- High7.5An issue was discovered in USIM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, WCheck if you run itEPSS 0.29%Apr 6, 2026
- Critical9.1An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W92Check if you run itEPSS 0.32%Apr 6, 2026
- High7.5An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W9Check if you run itEPSS 0.29%Apr 6, 2026
- High7.5An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem (Exynos 980, 850, 990, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 1680, 9110, W9Check if you run itEPSS 0.36%Apr 6, 2026
- High7.0An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000.Check if you run itEPSS 0.09%Apr 6, 2026
- High7.0An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor amd Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000.Check if you run itEPSS 0.09%Apr 6, 2026
- Critical10.0An issue was discovered in SMS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W9Check if you run itEPSS 0.54%Apr 6, 2026
- High7.5An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W9Check if you run itEPSS 0.29%Apr 6, 2026
- Critical9.3topsecgroup tianxin_internet_behavior_management_system Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.27%Apr 6, 2026
- High8.7A weakness has been identified in Tenda CH22 1.0.0.1.Check if you run itEPSS 0.71%Apr 5, 2026
- High8.7A security flaw has been discovered in Tenda CH22 1.0.0.1.Check if you run itEPSS 0.68%Apr 5, 2026
- Medium4.8A vulnerability was identified in elgentos magento2-dev-mcp up to 1.0.2.Check if you run itEPSS 0.91%Apr 5, 2026
- Medium4.8A vulnerability was determined in Nor2-io heim-mcp up to 0.1.3.Check if you run itEPSS 0.91%Apr 5, 2026
- High8.1Missing Authentication for Critical Function vulnerability in Honeywell Handheld Scanners allows Authentication Abuse.This issue affects Handheld Scanners: from C1 Base(Ingenic x10Check if you run itEPSS 0.66%Apr 5, 2026
- Medium6.9A vulnerability was found in Acrel Electrical Prepaid Cloud Platform 1.0.Check if you run itEPSS 0.30%Apr 5, 2026
- Low3.5Zcash zcashd before 6.12.0 allows invalid transactions to be accepted under certain conditions, which potentially could have resulted in the draining of user funds from the SproutCheck if you run itEPSS 0.22%Apr 5, 2026
- Medium5.3A flaw has been found in griptape-ai griptape 0.19.4.Check if you run itEPSS 0.43%Apr 5, 2026
- High8.8eDirectory contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to bypass administrator authentication and disclose sensitive files by injecting SQLCheck if you run itEPSS 0.54%Apr 5, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the filter_user_mail parameter.Check if you run itEPSS 0.32%Apr 5, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the id_project parameter.Check if you run itEPSS 0.32%Apr 5, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the sort_direction parameter.Check if you run itEPSS 0.32%Apr 5, 2026
Sort