Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8Softros LAN Messenger 9.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string to the custom logCheck if you run itEPSS 0.27%Mar 30, 2026
- Medium6.9HeidiSQL 9.5.0.5196 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long file path in the logging preferCheck if you run itEPSS 0.21%Mar 30, 2026
- Medium6.8Free IP Switcher 3.1 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Computer Name fielCheck if you run itEPSS 0.29%Mar 30, 2026
- Medium6.8BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the SMTP configuration interface that allows local attackers to crash the application by supplyingCheck if you run itEPSS 0.22%Mar 30, 2026
- Medium6.9NetSetMan 4.7.1 contains a buffer overflow vulnerability in the Workgroup feature that allows local attackers to crash the application by supplying oversized input.Check if you run itEPSS 0.22%Mar 30, 2026
- Medium6.9Valentina Studio 9.0.4 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Host field.Check if you run itEPSS 0.21%Mar 30, 2026
- Medium6.9FTPShell Server 6.83 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the account name fieldCheck if you run itEPSS 0.22%Mar 30, 2026
- Medium6.9AL-KO Robolinho Update Software has hard-coded AWS Access and Secret keys that allow anyone to access AL-KO's AWS bucket.Check if you run itEPSS 0.37%Mar 30, 2026
- Critical10.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Check this weekEPSS 14.00%Mar 30, 2026
- Medium5.8A Privilege Dropping / Lowering Errors/Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in cosmic-greeter can allow an attacker to regain privileges tha…Check if you run itEPSS 0.08%Mar 30, 2026
- High8.5The Performance Library component of Gigabyte Control Center has an Insecure Deserialization vulnerability.Check if you run itEPSS 0.21%Mar 30, 2026
- Critical9.8A flaw was found in libarchive.Check if you run itEPSS 1.09%Mar 30, 2026
- Critical9.2Gigabyte Control Center developed by GIGABYTE has an Arbitrary File Write vulnerability.Check if you run itEPSS 1.00%Mar 30, 2026
- Medium5.3User enumeration in ESET Protect (on-prem) via Response Timing.Check if you run itEPSS 0.16%Mar 30, 2026
- Critical10.0A command injection vulnerability exists in MLflow's model serving container initialization code, specifically in the function.Check if you run itEPSS 2.40%Mar 30, 2026
- High8.7An integer overflow vulnerability in the HTTP chunked transfer encoding parser in tinyproxy up to and including version 1.11.3 allows an unauthenticated remote attacker to cause aCheck if you run itEPSS 0.60%Mar 30, 2026
- High7.5An unauthenticated remote attacker can exploit insufficient input validation to access backend components beyond their intended scope via path traversal, resulting in exposure of sCheck if you run itEPSS 0.31%Mar 30, 2026
- High8.2A flaw was found in libsoup.Check if you run itEPSS 0.26%Mar 30, 2026
- Low2.3A vulnerability has been found in FRRouting FRR up to 10.5.1.Check if you run itEPSS 0.28%Mar 30, 2026
- Medium4.8A flaw has been found in code-projects Exam Form Submission 1.0.Check if you run itEPSS 0.20%Mar 30, 2026
- Medium5.3A vulnerability was detected in Totolink A3300R 17.0.0cu.557_b20221024.Check if you run itEPSS 4.07%Mar 30, 2026
- Medium5.3A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b20221024.Check if you run itEPSS 2.78%Mar 30, 2026
- High7.5The Download Monitor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.7 via the executePayment() function due to misCheck if you run itEPSS 0.27%Mar 30, 2026
- Critical10.0A path traversal vulnerability exists in the function within the file of the mlflow/mlflow repository.Check if you run itEPSS 0.59%Mar 30, 2026
- Medium5.3A weakness has been identified in Totolink A3300R 17.0.0cu.557_b20221024.Check if you run itEPSS 4.07%Mar 30, 2026
Sort