Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5An unauthenticated attacker within proximity of the Meatmeet device can issue several commands over Bluetooth Low Energy (BLE) to these devices which would result in a Denial of SeCheck if you run itEPSS 0.28%Dec 10, 2025
- Critical9.1The mobile application is configured to allow clear text traffic to all domains and communicates with an API server over HTTP.Check if you run itEPSS 0.26%Dec 10, 2025
- Critical9.8The mobile application was found to contain stored credentials for the network it was developed on.Check if you run itEPSS 0.29%Dec 10, 2025
- Medium4.6The firmware on the basestation of the Meatmeet is not encrypted.Check if you run itEPSS 0.13%Dec 10, 2025
- High8.8An unauthenticated attacker within proximity of the Meatmeet device can perform an unauthorized Over The Air (OTA) firmware upgrade using Bluetooth Low Energy (BLE), resulting in tCheck if you run itEPSS 0.56%Dec 10, 2025
- Critical9.8The Meatmeet Pro was found to be shipped with hardcoded Wi-Fi credentials in the firmware, for the test network it was developed on.Check if you run itEPSS 0.43%Dec 10, 2025
- Medium6.8The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled.Check if you run itEPSS 0.21%Dec 10, 2025
- High7.5As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the flash from the device and retrieve sensitive information such as detaCheck if you run itEPSS 0.37%Dec 10, 2025
- Critical9.8An issue was discovered in Meatmeet Android Mobile Application 1.1.2.0.Check if you run itEPSS 0.47%Dec 10, 2025
- Medium6.5A lack of security checks in the file import process of AB TECHNOLOGY Document Reader: PDF, DOC, PPT v65.0 allows attackers to execute a directory traversal.Check if you run itEPSS 0.57%Dec 10, 2025
- Medium6.5A lack of security checks in the file import process of RHOPHI Analytics LLP Office App-Edit Word v6.4.1 allows attackers to execute a directory traversal.Check if you run itEPSS 0.57%Dec 10, 2025
- High8.4An issue in sd command v1.0.0 and before allows attackers to escalate privileges to root via a crafted command.Check if you run itEPSS 0.20%Dec 10, 2025
- Medium6.5An integer overflow in the psdParser::ReadImageData function of FreeImage v3.18.0 and before allows attackers to cause a Denial of Service (DoS) via supplying a crafted PSD file.Check if you run itEPSS 0.30%Dec 10, 2025
- Critical9.1DataGear v5.5.0 is vulnerable to Arbitrary File Deletion.Check if you run itEPSS 0.51%Dec 10, 2025
- Medium6.1Cross Site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code via injecting a crafted payload into a filename.Check if you run itEPSS 0.44%Dec 10, 2025
- Critical9.8A template injection vulnerability in the /vip/v1/file/save component of ChanCMS v3.3.4 allows attackers to execute arbitrary code via a crafted POST request.Check if you run itEPSS 0.54%Dec 10, 2025
- High7.5A Server-Side Request Forgery (SSRF) vulnerability was discovered in the webpage-to-markdown conversion feature of markdownify-mcp v0.0.2 and before.Check if you run itEPSS 0.53%Dec 10, 2025
- High7.5Aqara Hub devices including Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025 automatically collect and upload unencrypted sensitive information.Check if you run itEPSS 0.19%Dec 10, 2025
- Medium6.5NULL-pointer dereference vulnerabilities in Aqara Hub M2 4.3.6_0027, Hub M3 4.3.6_0025, and Camera Hub G3 4.1.9_0027 in the JSON processing enable denial-of-service attacks throughCheck if you run itEPSS 0.28%Dec 10, 2025
- High8.1Multiple vulnerabilities in Aqara Hub firmware update process in the Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025 devices, allow attackers to install maliciouCheck if you run itEPSS 0.23%Dec 10, 2025
- Critical9.8Aqara Hub devices including Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025 contain an undocumented remote access mechanism enabling unrestricted remote commandCheck if you run itEPSS 1.80%Dec 10, 2025
- Medium6.6Command injection vulnerabilities in Aqara Camera Hub G3 4.1.9_0027 allow attackers to execute arbitrary commands with root privileges through malicious QR codes during device setuCheck if you run itEPSS 2.03%Dec 10, 2025
- High7.3Command injection vulnerability in Aqara Hub devices including Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025 allows attackers to execute arbitrary commands witCheck if you run itEPSS 1.47%Dec 10, 2025
- High7.4Aqara Hub devices including Hub M2 4.3.6_0027, Hub M3 4.3.6_0025, Camera Hub G3 4.1.9_0027 fail to validate server certificates in TLS connections for discovery services and CoAP gCheck if you run itEPSS 0.18%Dec 10, 2025
- High7.4Aqara Hub devices including Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025 fail to validate server certificates during HTTPS firmware downloads, allowing man-inCheck if you run itEPSS 0.18%Dec 10, 2025
Sort