Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Use after free vulnerability in Softing smartLink HW-DP or smartLink HW-PN webserver allows HTTP DoS.Check if you run itEPSS 0.22%Mar 27, 2026
- High7.5In RedisFilterExpressionConverter of spring-ai-redis-store, when a user-controlled string is passed as a filter value for a TAG field, stringValue() inserts the value directly intoCheck if you run itEPSS 0.26%Mar 27, 2026
- High7.5Spring AI's spring-ai-neo4j-store contains a Cypher injection vulnerability in Neo4jVectorFilterExpressionConverter.Check if you run itEPSS 0.26%Mar 27, 2026
- Medium5.5A flaw was found in firewalld.Check if you run itEPSS 0.13%Mar 27, 2026
- Medium6.9Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication.Check if you run itEPSS 0.40%Mar 27, 2026
- High8.6Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in the executionCheck if you run itEPSS 0.39%Mar 27, 2026
- High8.7Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without authentication.Check if you run itEPSS 0.38%Mar 27, 2026
- High8.7Code injection vulnerability exists in BUFFALO Wi-Fi router products.Check if you run itEPSS 0.28%Mar 27, 2026
- High8.6OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products.Check if you run itEPSS 0.96%Mar 27, 2026
- Medium5.1WordPress Plugin "OpenStreetMap" provided by MiKa contains a cross-site scripting vulnerability.Check if you run itEPSS 0.17%Mar 27, 2026
- Medium5.9In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.Check if you run itEPSS 0.12%Mar 27, 2026
- Medium6.5The Smart Slider 3 plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.5.1.33 via the 'actionExportAll' function.Check if you run itEPSS 0.50%Mar 27, 2026
- Medium6.9A security vulnerability has been detected in Shenzhen Ruiming Technology Streamax Crocus up to 1.3.44.Check if you run itEPSS 0.27%Mar 27, 2026
- Medium4.8A weakness has been identified in code-projects Exam Form Submission 1.0.Check if you run itEPSS 0.30%Mar 27, 2026
- Medium6.9A security flaw has been discovered in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.41%Mar 27, 2026
- Medium5.3A vulnerability was identified in Page-Replica Page Replica up to e4a7f52e75093ee318b4d5a9a9db6751050d2ad0.Check if you run itEPSS 0.21%Mar 27, 2026
- High7.5MapServer is a system for developing web-based GIS applications.Check if you run itEPSS 1.25%Mar 27, 2026
- High8.7A vulnerability was determined in Tenda AC5 15.03.06.47.Check if you run itEPSS 2.71%Mar 27, 2026
- Critical9.8BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.Check if you run itEPSS 0.52%Mar 27, 2026
- High7.4cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.27%Mar 27, 2026
- High7.8BentoML is a Python library for building online serving systems optimized for AI apps and model inference.Check if you run itEPSS 0.27%Mar 27, 2026
- High7.7MyTube is a self-hosted downloader and player for several video websites Prior to version 1.8.72, an unauthenticated attacker can lock out administrator and visitor accounts from pCheck if you run itEPSS 0.58%Mar 27, 2026
- High8.9MyTube is a self-hosted downloader and player for several video websites Prior to version 1.8.71, an unauthenticated attacker can register an arbitrary passkey and subsequently autCheck if you run itEPSS 0.51%Mar 27, 2026
- High7.4MyTube is a self-hosted downloader and player for several video websites Prior to version 1.8.69, an authorization bypass in the endpoint allows attackers with low-privilege credenCheck if you run itEPSS 0.41%Mar 27, 2026
- Medium6.5Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework.Check if you run itEPSS 0.29%Mar 27, 2026
Sort