Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition.Check if you run itEPSS 0.19%Mar 16, 2026
- Medium6.9A vulnerability was identified in itsourcecode Payroll Management System 1.0.Check if you run itEPSS 0.49%Mar 16, 2026
- Medium5.5libexpat before 2.7.5 allows an infinite loop while parsing DTD content.Check if you run itEPSS 0.24%Mar 16, 2026
- Medium5.5libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.Check if you run itEPSS 0.19%Mar 16, 2026
- High8.7GROWI OpenAI thread/message API endpoints do not perform authorization.Check if you run itEPSS 0.34%Mar 16, 2026
- Medium5.1A vulnerability was determined in SSCMS up to 7.4.0.Check if you run itEPSS 0.50%Mar 16, 2026
- Medium6.9A vulnerability was found in Tiandy Easy7 Integrated Management Platform 7.17.0.Check if you run itEPSS 0.32%Mar 16, 2026
- High7.8libexif through 0.6.25 has a flaw in decoding MakerNotes.Check if you run itEPSS 0.22%Mar 16, 2026
- Medium5.3Mumble before 1.6.870 is prone to an out-of-bounds array access, which may result in denial of service (client crash).Check if you run itEPSS 0.32%Mar 16, 2026
- Medium6.9A vulnerability has been found in Technologies Integrated Management Platform 7.17.0.Check if you run itEPSS 0.35%Mar 16, 2026
- Medium4.8A flaw has been found in INDEX Conferences & Exhibitions Organization YWF BPOF APGCS App up to 1.0.2 on Android.Check if you run itEPSS 0.12%Mar 16, 2026
- Low2.0A vulnerability was detected in myAEDES App up to 1.18.4 on Android.Check if you run itEPSS 0.15%Mar 16, 2026
- High8.6OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability.Check if you run itEPSS 1.61%Mar 16, 2026
- Low2.0A security vulnerability has been detected in XREAL Nebula App up to 3.2.1 on Android.Check if you run itEPSS 0.11%Mar 16, 2026
- Medium4.8A weakness has been identified in i-SENS SmartLog App up to 2.6.8 on Android.Check if you run itEPSS 0.12%Mar 16, 2026
- High7.1Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege.Check if you run itEPSS 0.26%Mar 16, 2026
- Medium6.9Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of service.Check if you run itEPSS 0.21%Mar 16, 2026
- Medium5.3A security flaw has been discovered in FlowCI flow-core-x up to 1.23.01.Check if you run itEPSS 0.23%Mar 16, 2026
- Medium5.9Improper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows local attacker to install arbitrary application.Check if you run itEPSS 0.08%Mar 16, 2026
- High8.7A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-3Check if you run itEPSS 0.95%Mar 16, 2026
- Medium5.9Path traversal in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privilege.Check if you run itEPSS 0.14%Mar 16, 2026
- High7.0Improper access control in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privilege.Check if you run itEPSS 0.15%Mar 16, 2026
- High7.1Authentication bypass by replay in Smart Switch prior to version 3.7.69.15 allows remote attackers to trigger privileged functions.Check if you run itEPSS 0.36%Mar 16, 2026
- High7.1Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication.Check if you run itEPSS 0.64%Mar 16, 2026
- Medium5.3Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass authentication.Check if you run itEPSS 0.30%Mar 16, 2026
Sort