Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Edimax EW-7438RPn-v3 Mini 1.27 allows unauthenticated attackers to access the /wizard_reboot.asp page in unsetup mode, which discloses the Wi-Fi SSID and security key.Check if you run itEPSS 0.79%Feb 5, 2026
- Medium5.1Edimax EW-7438RPn-v3 Mini 1.27 is vulnerable to cross-site request forgery (CSRF) that can lead to command execution.Check if you run itEPSS 0.35%Feb 5, 2026
- Medium5.1HRSALE 1.1.8 contains a cross-site request forgery vulnerability that allows attackers to add unauthorized administrative users through the employee registration form.Check if you run itEPSS 0.17%Feb 5, 2026
- Medium5.1Exagate SYSGuard 6001 contains a cross-site request forgery vulnerability that allows attackers to create unauthorized admin accounts through a crafted HTML form.Check if you run itEPSS 0.19%Feb 5, 2026
- Medium4.6ProficySCADA for iOS 5.0.25920 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the password input field.Check if you run itEPSS 0.37%Feb 5, 2026
- High8.410-Strike Network Inventory Explorer 8.54 contains a structured exception handler buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting SEH rCheck if you run itEPSS 0.38%Feb 5, 2026
- Medium4.6Everest, later referred to as AIDA64, 5.50.2100 contains a denial of service vulnerability that allows local attackers to crash the application by manipulating file open functionalCheck if you run itEPSS 0.24%Feb 5, 2026
- Medium4.6Odin Secure FTP Expert 7.6.3 contains a local denial of service vulnerability that allows attackers to crash the application by manipulating site information fields.Check if you run itEPSS 0.20%Feb 5, 2026
- High8.410-Strike Network Inventory Explorer 9.03 contains a buffer overflow vulnerability in the file import functionality that allows remote attackers to execute arbitrary code.Check if you run itEPSS 0.70%Feb 5, 2026
- High8.6PHP-Fusion 9.03.50 contains a remote code execution vulnerability in the 'add_panel_form()' function that allows attackers to execute arbitrary code through an eval() function withCheck if you run itEPSS 0.62%Feb 5, 2026
- Medium6.7ZOC Terminal 7.25.5 contains a denial of service vulnerability in the private key file input field that allows attackers to crash the application.Check if you run itEPSS 0.40%Feb 5, 2026
- Medium4.6UltraVNC Viewer 1.2.4.0 contains a denial of service vulnerability that allows attackers to crash the application by manipulating VNC Server input.Check if you run itEPSS 0.40%Feb 5, 2026
- Medium6.7UltraVNC Launcher 1.2.4.0 contains a denial of service vulnerability in the Repeater Host configuration field that allows attackers to crash the application.Check if you run itEPSS 0.54%Feb 5, 2026
- Medium6.7UltraVNC Launcher 1.2.4.0 contains a denial of service vulnerability in its password configuration properties that allows local attackers to crash the application.Check if you run itEPSS 0.25%Feb 5, 2026
- Medium6.7Nsauditor Product Key Explorer 4.2.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by inputting a specially crafted registrationCheck if you run itEPSS 0.26%Feb 5, 2026
- Medium6.7Nsauditor 3.2.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application.Check if you run itEPSS 0.51%Feb 5, 2026
- High8.5Memu Play 7.1.3 contains an insecure folder permissions vulnerability that allows low-privileged users to modify the MemuService.exe executable.Check if you run itEPSS 0.38%Feb 5, 2026
- Medium6.7ZOC Terminal 7.25.5 contains a script processing vulnerability that allows local attackers to crash the application by loading a maliciously crafted REXX script file.Check if you run itEPSS 0.19%Feb 5, 2026
- Medium6.9Dnsmasq-utils 2.79-1 contains a buffer overflow vulnerability in the dhcp_release utility that allows attackers to cause a denial of service by supplying excessive input.Check if you run itEPSS 0.21%Feb 5, 2026
- High8.4Free Desktop Clock 3.0 contains a stack overflow vulnerability in the Time Zones display name input that allows attackers to overwrite Structured Exception Handler (SEH) registers.Check if you run itEPSS 0.61%Feb 5, 2026
- Critical9.3Edimax EW-7438RPn-v3 Mini 1.27 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands through the /goform/mp endpoint.Check if you run itEPSS 6.98%Feb 5, 2026
- High8.4B64dec 1.1.2 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) with crafted input.Check if you run itEPSS 0.42%Feb 5, 2026
- Critical9.3Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.35%Feb 5, 2026
- Medium6.7CODE::BLOCKS 16.01 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler with crafted Unicode charactCheck if you run itEPSS 0.24%Feb 5, 2026
- High8.4Rubo DICOM Viewer 2.0 contains a buffer overflow vulnerability in the DICOM server name input field that allows attackers to overwrite Structured Exception Handler (SEH).Check if you run itEPSS 0.54%Feb 5, 2026
Sort