Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3COMMAX Smart Home System CDP-1020n contains an SQL injection vulnerability that allows attackers to bypass authentication by injecting arbitrary SQL code through the 'id' parameterCheck if you run itEPSS 0.53%Dec 9, 2025
- Critical9.3COMMAX CVD-Axx DVR 5.1.4 contains weak default administrative credentials that allow remote password attacks and disclose RTSP stream.Check if you run itEPSS 0.37%Dec 9, 2025
- High8.7COMMAX Biometric Access Control System 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access sensitive information and circumvent phCheck if you run itEPSS 0.55%Dec 9, 2025
- High8.7COMMAX UMS Client ActiveX Control 1.7.0.2 contains a heap-based buffer overflow vulnerability that allows attackers to execute arbitrary code by providing excessively long string aCheck if you run itEPSS 0.49%Dec 9, 2025
- High8.7OpenBMCS 2.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting arbitrary SQL code.Check if you run itEPSS 0.41%Dec 9, 2025
- Medium6.9OpenBMCS 2.4 contains an unauthenticated SSRF vulnerability that allows attackers to bypass firewalls and initiate service and network enumeration on the internal network through tCheck if you run itEPSS 0.32%Dec 9, 2025
- Medium5.3OpenBMCS 2.4 contains a CSRF vulnerability that allows attackers to perform actions with administrative privileges by exploiting the sendFeedback.php endpoint.Check if you run itEPSS 0.19%Dec 9, 2025
- High8.7OpenBMCS 2.4 allows an attacker to escalate privileges from a read user to an admin user by manipulating permissions and exploiting a vulnerability in the update_user_permissions.pCheck if you run itEPSS 0.48%Dec 9, 2025
- High8.8SiYuan is self-hosted, open source personal knowledge management software.Check if you run itEPSS 0.44%Dec 9, 2025
- High7.8Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an out-of-bounds read vulnerability when parsing a craftedCheck if you run itEPSS 0.50%Dec 9, 2025
- High7.8Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Untrusted Search Path vulnerability that might allow attCheck if you run itEPSS 0.48%Dec 9, 2025
- Low3.3Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulneraCheck if you run itEPSS 0.43%Dec 9, 2025
- Low3.3Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulneraCheck if you run itEPSS 0.45%Dec 9, 2025
- High8.1Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.Check if you run itEPSS 0.68%Dec 9, 2025
- Medium4.9Umbraco is an ASP.NET CMS.Check if you run itEPSS 0.36%Dec 9, 2025
- High7.5Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication.Check if you run itEPSS 0.81%Dec 9, 2025
- Critical9.1Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication.Check if you run itEPSS 0.56%Dec 9, 2025
- High8.8Ladybug adds message-based debugging, unit, system, and regression testing to Java applications.Check if you run itEPSS 0.33%Dec 9, 2025
- Medium6.9A vulnerability was determined in itsourcecode Student Management System 1.0.Check if you run itEPSS 0.39%Dec 9, 2025
- Critical9.3Emby Server is a user-installable home media server.Check if you run itEPSS 0.59%Dec 9, 2025
- Medium6.9A vulnerability was found in itsourcecode Student Management System 1.0.Check if you run itEPSS 0.39%Dec 9, 2025
- Medium6.9A vulnerability has been found in itsourcecode Student Management System 1.0.Check if you run itEPSS 0.39%Dec 9, 2025
- Medium6.5A vulnerability was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on tag reuse after completion timeouts may aCheck if you run itEPSS 0.21%Dec 9, 2025
- Medium6.5An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on re-keying and stream flushing during device rebiCheck if you run itEPSS 0.13%Dec 9, 2025
- Medium5.1An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on Transaction Layer Packet (TLP) ordering and tagCheck if you run itEPSS 0.14%Dec 9, 2025
Sort