Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8A command injection vulnerability exists in the web management interface of the WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02).Check if you run itEPSS 1.21%Mar 18, 2026
- Critical9.8The WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) implements a broken authentication mechanism in its web management interface.Check if you run itEPSS 0.43%Mar 18, 2026
- Critical9.1The web interface of the WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) contains hardcoded credential disclosure mechanisms (in the form of Server Side Include) within multCheck if you run itEPSS 0.44%Mar 18, 2026
- Medium6.1A Cross-Site Scripting (XSS) vulnerability exists in the web-based configuration interface of Zucchetti Axess access control devices, including XA4, X3/X3BIO, X4, X7, and XIO / i-dCheck if you run itEPSS 0.21%Mar 18, 2026
- Medium5.4A stored cross-site scripting (XSS) vulnerability exists in the NotChatbot WebChat widget thru 1.4.4.Check if you run itEPSS 0.29%Mar 18, 2026
- Critical9.8An arbitrary file upload vulnerability in aaPanel v7.57.0 allows attackers to execute arbitrary code via uploading a crafted file.Check if you run itEPSS 0.59%Mar 18, 2026
- High7.5A lack of path validation in aaPanel v7.57.0 allows attackers to execute a local file inclusion (LFI), leadingot sensitive information exposure.Check if you run itEPSS 0.36%Mar 18, 2026
- High7.5An issue in the VirtualHost configuration handling/parser component of aaPanel v7.57.0 allows attackers to cause a Regular Expression Denial of Service (ReDoS) via a crafted input.Check if you run itEPSS 0.39%Mar 18, 2026
- High8.2Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension bCheck if you run itEPSS 0.72%Mar 18, 2026
- Critical9.8Mura before 10.1.14 allows beanFeed.cfc getQuery sortby SQL injection.Check if you run itEPSS 0.37%Mar 18, 2026
- Critical9.8Mura before 10.1.14 allows beanFeed.cfc getQuery sortDirection SQL injection.Check if you run itEPSS 0.30%Mar 18, 2026
- High8.8Microsoft Dynamics 365 Customer Engagement (on-premises) 1612 (9.0.2.3034) allows the generation of customized reports via raw SQL queries in an upload of a .rdl (Report DefinitionCheck if you run itEPSS 0.52%Mar 18, 2026
- High8.1MuraCMS through 10.1.10 contains a CSRF vulnerability that allows attackers to permanently destroy all deleted content stored in the trash system through a simple CSRF attack.Check if you run itEPSS 0.15%Mar 18, 2026
- High7.1The update address CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to manipulate user address information through CSRF.Check if you run itEPSS 0.13%Mar 18, 2026
- High8.8The Trash Restore CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to restore deleted content from the trash to unauthorized locations through CSRF.Check if you run itEPSS 0.15%Mar 18, 2026
- Medium6.5MuraCMS through 10.1.10 contains a CSRF vulnerability in the bundle creation functionality (csettings.cfc createBundle method) that allows unauthenticated attackers to force adminiCheck if you run itEPSS 0.19%Mar 18, 2026
- High8.0MuraCMS through 10.1.10 contains a CSRF vulnerability in the Add To Group functionality for user management (cUsers.cfc addToGroup method) that allows attackers to escalate privileCheck if you run itEPSS 0.15%Mar 18, 2026
- High8.8The import form CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to upload and install malicious form definitions through a CSRF attack.Check if you run itEPSS 0.19%Mar 18, 2026
- Medium5.3Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.23%Mar 17, 2026
- Low2.3Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.20%Mar 17, 2026
- High8.8LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g.Check if you run itEPSS 0.49%Mar 17, 2026
- High8.8LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g.Check if you run itEPSS 0.44%Mar 17, 2026
- High8.8Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Check if you run itEPSS 2.32%Mar 17, 2026
- High7.2pyOpenSSL is a Python wrapper around the OpenSSL library.Check if you run itEPSS 0.80%Mar 17, 2026
- Medium5.1A vulnerability was detected in Portabilis i-Educar 2.11.Check if you run itEPSS 0.23%Mar 17, 2026
Sort