Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Monkeytype is a minimalistic and customizable typing test.Check if you run itEPSS 0.24%Dec 4, 2025
- Medium5.3A flaw has been found in youlaitech youlai-mall 1.0.0/2.0.0.Check if you run itEPSS 0.47%Dec 4, 2025
- High7.3SysReptor is a fully customizable pentest reporting platform.Check if you run itEPSS 0.19%Dec 4, 2025
- High8.0Taiko Alethia is an Ethereum-equivalent, permissionless, based rollup designed to scale Ethereum without compromising its fundamental properties.Check if you run itEPSS 0.31%Dec 4, 2025
- High7.5A stack-based buffer overflow vulnerability [CWE-121] in WatchGuard Fireware OS's certificate request command could allow an authenticated privileged user to execute arbitrary codeCheck if you run itEPSS 0.35%Dec 4, 2025
- High8.9LaraDashboard is an all-In-one solution to start a Laravel Application.Check if you run itEPSS 0.41%Dec 4, 2025
- High7.5Fulcio is a free-to-use certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity.Check if you run itEPSS 0.21%Dec 4, 2025
- Medium6.3The WatchGuard Mobile VPN with SSL Client on Windows allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY/SYSTEM on the WindoCheck if you run itEPSS 0.27%Dec 4, 2025
- Medium6.0When a WF200/WGM160P device is configured to operate as an Access Point, it may be vulnerable to a denial of service triggered by a malformed packet.Check if you run itEPSS 0.17%Dec 4, 2025
- Medium4.8A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the IPS configuration.Check if you run itEPSS 0.24%Dec 4, 2025
- High8.2An XPath Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from the Firebox configuration through an eCheck if you run itEPSS 0.48%Dec 4, 2025
- High8.7A memory corruption vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker to trigger a Denial of Service (DoS) condition in the Mobile User VPN with IKEv2 aCheck if you run itEPSS 0.50%Dec 4, 2025
- Medium6.7An Expected Behavior Violation [CWE-440] vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS boot time system integrity check and prevent the FiCheck if you run itEPSS 0.13%Dec 4, 2025
- Medium4.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Gateway Wireless Controller module) allows StorCheck if you run itEPSS 0.20%Dec 4, 2025
- Medium4.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Autotask Technology Integration module) allowsCheck if you run itEPSS 0.20%Dec 4, 2025
- Medium4.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (ConnectWise Technology Integration module) alloCheck if you run itEPSS 0.20%Dec 4, 2025
- Medium4.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Tigerpaw Technology Integration module) allowsCheck if you run itEPSS 0.20%Dec 4, 2025
- High8.6An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command.Check if you run itEPSS 0.62%Dec 4, 2025
- High8.7The password reset mechanism for the Pivot client application is weak, and it may allow an attacker to take over the account.Check if you run itEPSS 0.29%Dec 4, 2025
- High8.6An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via specially crafted IPSec configuratioCheck if you run itEPSS 0.69%Dec 4, 2025
- High8.6An Out-of-bounds Write vulnerability in WatchGuard Fireware OS’s certificate request command could allow an authenticated privileged user to execute arbitrary code via specially crCheck if you run itEPSS 0.44%Dec 4, 2025
- High7.4The web interface of the Silicon Labs Simplicity Device Manager is exposed publicly and can be used to extract the NTLMv2 hash which an attacker could use to crack the user's domaiCheck if you run itEPSS 0.17%Dec 4, 2025
- High8.3The SolisCloud API suffers from a Broken Access Control vulnerability, specifically an Insecure Direct Object Reference (IDOR), where any authenticated user can access detailed datCheck if you run itEPSS 0.26%Dec 4, 2025
- High7.4DCIM dcTrack allows an attacker to misuse certain remote access features.Check if you run itEPSS 0.34%Dec 4, 2025
- High8.4DCIM dcTrack platforms utilize default and hard-coded credentials for access.Check if you run itEPSS 0.13%Dec 4, 2025
Sort