Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A security flaw has been discovered in Tenda 4G03 Pro up to 1.0/1.1/04.03.01.53/192.168.0.1.Check if you run itEPSS 0.38%Apr 4, 2026
- High8.7Wikipedia 12.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting oversized input through the search functionalCheck if you run itEPSS 0.36%Apr 4, 2026
- Medium5.3Nodcms contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious forms.Check if you run itEPSS 0.11%Apr 4, 2026
- High8.610-Strike LANState 8.8 contains a local buffer overflow vulnerability in structured exception handling that allows local attackers to execute arbitrary code by crafting malicious LCheck if you run itEPSS 0.19%Apr 4, 2026
- Critical9.3NICO-FTP 3.0.1.19 contains a structured exception handler buffer overflow vulnerability that allows remote attackers to execute arbitrary code by sending crafted FTP commands.Check if you run itEPSS 1.10%Apr 4, 2026
- Medium6.9Termite 3.4 contains a buffer overflow vulnerability in the User interface language settings field that allows local attackers to cause a denial of service by supplying an excessivCheck if you run itEPSS 0.19%Apr 4, 2026
- Medium6.9FTP Voyager 16.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by injecting oversized buffer data into the site profile IP fieldCheck if you run itEPSS 0.31%Apr 4, 2026
- High8.6Snes9K 0.0.9z contains a buffer overflow vulnerability in the Netplay Socket Port Number field that allows local attackers to trigger a structured exception handler (SEH) overwriteCheck if you run itEPSS 0.19%Apr 4, 2026
- Medium5.1MyBB Last User's Threads in Profile Plugin 1.2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by crafting thread subjectCheck if you run itEPSS 0.21%Apr 4, 2026
- Medium5.1MyBB My Arcade Plugin 1.3 contains a persistent cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through arcade game score comments.Check if you run itEPSS 0.26%Apr 4, 2026
- Medium5.1MyBB Downloads Plugin 2.0.3 contains a persistent cross-site scripting vulnerability that allows regular members to inject malicious scripts through the download title field.Check if you run itEPSS 0.23%Apr 4, 2026
- Medium5.1MyBB Like Plugin 3.0.0 contains a stored cross-site scripting vulnerability.Check if you run itEPSS 0.24%Apr 4, 2026
- High8.77 Tik 1.0.1.0 contains a denial of service vulnerability that allows attackers to crash the application by submitting excessively long input strings to the search functionality.Check if you run itEPSS 0.33%Apr 4, 2026
- Medium6.9Eco Search 1.0.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionalCheck if you run itEPSS 0.17%Apr 4, 2026
- Medium6.9FastTube 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionalitCheck if you run itEPSS 0.13%Apr 4, 2026
- Medium6.9One Search 1.1.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting excessively long input strings to the search functiCheck if you run itEPSS 0.17%Apr 4, 2026
- High8.7VPN Browser+ 1.1.0.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting oversized input through the search funcCheck if you run itEPSS 0.37%Apr 4, 2026
- Medium6.9Watchr 1.1.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality.Check if you run itEPSS 0.12%Apr 4, 2026
- Medium6.9Smart VPN 1.1.3.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input through the search interface.Check if you run itEPSS 0.19%Apr 4, 2026
- Medium6.9VSCO 1.1.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string through the search functionaliCheck if you run itEPSS 0.17%Apr 4, 2026
- High8.5sheed AntiVirus 2.3 contains an unquoted service path vulnerability in the ShavProt service that allows local attackers to escalate privileges by exploiting the service binary pathCheck if you run itEPSS 0.13%Apr 4, 2026
- High8.5Hotspot Shield 6.0.3 contains an unquoted service path vulnerability in the hshld service binary that allows local attackers to escalate privileges by injecting malicious executablCheck if you run itEPSS 0.15%Apr 4, 2026
- High8.5IObit Malware Fighter 4.3.1 contains an unquoted service path vulnerability in the IMFservice and LiveUpdateSvc services that allows local attackers to escalate privileges.Check if you run itEPSS 0.18%Apr 4, 2026
- High8.5Netgate AMITI Antivirus build 23.0.305 contains an unquoted service path vulnerability in the AmitiAvSrv and AmitiAntivirusHealth services that allows local attackers to escalate pCheck if you run itEPSS 0.73%Apr 4, 2026
- High8.5NETGATE Registry Cleaner build 16.0.205 contains an unquoted service path vulnerability in the NGRegClnSrv service that allows local attackers to escalate privileges by exploitingCheck if you run itEPSS 0.73%Apr 4, 2026
Sort