Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3IBM Planning Analytics Local 2.1.0 - 2.1.15 could disclose sensitive information about server architecture that could aid in further attacks against the system.Check if you run itEPSS 0.21%Dec 9, 2025
- High7.5NiceGUI is a Python-based UI framework.Check if you run itEPSS 1.12%Dec 9, 2025
- Critical9.3FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems.Check if you run itEPSS 3.39%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the WindowContext parameter of /Mondo/lang/sys/Forms/MAI/compose.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium6.9MiniDVBLinux 5.4 contains a remote code execution vulnerability in the SVDRP protocol that allows remote attackers to send commands to manipulate TV systems.Check if you run itEPSS 0.92%Dec 9, 2025
- High8.7MiniDVBLinux 5.4 contains an unauthenticated vulnerability in the tv_action.sh script that allows remote attackers to generate live stream snapshots through the Simple VDR ProtocolCheck if you run itEPSS 0.53%Dec 9, 2025
- High8.7MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter.Check if you run itEPSS 0.96%Dec 9, 2025
- Critical9.3MiniDVBLinux 5.4 contains an authentication bypass vulnerability that allows remote attackers to change the root password without authentication.Check if you run itEPSS 0.97%Dec 9, 2025
- Critical9.8@vitejs/plugin-rs provides React Server Components (RSC) support for Vite.Check if you run itEPSS 0.81%Dec 9, 2025
- High8.7MiniDVBLinux 5.4 contains an unauthenticated configuration download vulnerability that allows remote attackers to access sensitive system configuration files through a direct objecCheck if you run itEPSS 0.54%Dec 9, 2025
- Critical9.9Tinycontrol LAN Controller v3 LK3 version 1.58a contains an unauthenticated vulnerability that allows remote attackers to download configuration backup files containing sensitive cCheck if you run itEPSS 0.63%Dec 9, 2025
- Critical9.3Selea Targa IP OCR-ANPR Camera contains a hard-coded developer password vulnerability that allows unauthorized configuration access through an undocumented page.Check if you run itEPSS 0.52%Dec 9, 2025
- High8.5Selea Targa IP OCR-ANPR Camera contains a cross-site request forgery vulnerability that allows attackers to create administrative users without authentication.Check if you run itEPSS 0.25%Dec 9, 2025
- Medium5.1Selea Targa IP OCR-ANPR Camera contains a stored cross-site scripting vulnerability in the 'files_list' parameter that allows attackers to inject malicious HTML and script code.Check if you run itEPSS 0.30%Dec 9, 2025
- Critical9.3Selea Targa IP OCR-ANPR Camera contains an unauthenticated command injection vulnerability in utils.php that allows remote attackers to execute arbitrary shell commands.Check if you run itEPSS 2.62%Dec 9, 2025
- High8.7Selea Targa IP OCR-ANPR Camera contains an unauthenticated vulnerability that allows remote attackers to access live video streams without authentication.Check if you run itEPSS 0.47%Dec 9, 2025
- High7.1STVS ProVision 5.9.10 contains a path traversal vulnerability that allows authenticated attackers to access arbitrary files by manipulating the files parameter in the archive downlCheck if you run itEPSS 0.77%Dec 9, 2025
- Medium6.9STVS ProVision 5.9.10 contains a cross-site request forgery vulnerability that allows attackers to perform actions with administrative privileges by exploiting unvalidated HTTP reqCheck if you run itEPSS 0.20%Dec 9, 2025
- High8.7COMMAX WebViewer ActiveX Control 2.1.4.5 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by providing excessively long string arrays througCheck if you run itEPSS 0.49%Dec 9, 2025
- High8.7OpenBMCS 2.4 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive files by exploiting directory listing functionality.Check if you run itEPSS 0.55%Dec 9, 2025
- Medium6.9IntelliChoice eFORCE Software Suite 2.5.9 contains a username enumeration vulnerability that allows attackers to enumerate valid users by exploiting the 'ctl00$MainContent$UserNameCheck if you run itEPSS 0.36%Dec 9, 2025
- High8.7COMMAX Smart Home System is a smart IoT home solution that allows an unauthenticated attacker to disclose RTSP credentials in plain-text by exploiting the /overview.asp endpoint.Check if you run itEPSS 0.35%Dec 9, 2025
- Low2.4Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to error object serialization.Check if you run itEPSS 0.21%Dec 9, 2025
- High8.7COMMAX Smart Home System allows an unauthenticated attacker to change configuration and cause denial-of-service through the setconf endpoint.Check if you run itEPSS 0.35%Dec 9, 2025
- Medium5.5Creative Cloud Desktop versions 6.4.0.361 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could lead to applicatCheck if you run itEPSS 0.18%Dec 9, 2025
Sort