Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A vulnerability was detected in 648540858 wvp-GB28181-pro up to 2.7.4-20260107.Check if you run itEPSS 0.23%Mar 12, 2026
- High8.8Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer VulnerabilityPatch nowKEVEPSS 2.68%Mar 12, 2026
- High8.8Google Skia Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 2.33%Mar 12, 2026
- High7.5The My Sticky Bar plugin for WordPress is vulnerable to SQL injection via the AJAX action in all versions up to, and including, 2.8.6.Patch nowKEVEPSS 0.39%Mar 12, 2026
- Critical9.8GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the module parameter in the M.get_system_log function.Check if you run itEPSS 2.89%Mar 12, 2026
- High8.8GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a SQL injection vulnerability via the add_group() function.Check if you run itEPSS 0.53%Mar 12, 2026
- Critical9.8GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the set_config function.Check if you run itEPSS 2.58%Mar 12, 2026
- Critical9.8GL-iNet GL-AR300M16 v4.3.11 was discovered to contain multiple command injection vulnerabilities in the set_upgrade function via the modem_url, target_version, current_version, firCheck if you run itEPSS 3.22%Mar 12, 2026
- Critical9.8GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the string port parameter in the enable_echo_server function.Check if you run itEPSS 2.89%Mar 12, 2026
- Critical9.8HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have a stack buffer overflow that leads toCheck if you run itEPSS 0.83%Mar 12, 2026
- High7.5HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 allows unauthenticated attackers to causeCheck if you run itEPSS 0.56%Mar 12, 2026
- Critical9.1HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have weak entropy for authentication cookiCheck if you run itEPSS 0.16%Mar 12, 2026
- High8.8HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have improper neutralization of special elCheck if you run itEPSS 0.92%Mar 12, 2026
- High7.5An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a craftedCheck if you run itEPSS 0.50%Mar 12, 2026
- Critical9.8Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWizardSelectMode.Check if you run itEPSS 0.71%Mar 12, 2026
- Medium6.5Heap buffer overflow vulnerability in LibreDWG versions v0.13.3.7571 up to v0.13.3.7835 allows a crafted DWG file to cause a Denial of Service (DoS) via the function decompress_R20Check if you run itEPSS 0.26%Mar 12, 2026
- Medium5.3A security vulnerability has been detected in whyour qinglong up to 2.20.1.Patch nowKEVEPSS 0.46%Mar 11, 2026
- Medium6.8HashiCorp Consul and Consul Enterprise 1.18.20 up to 1.21.10 and 1.22.4 are vulnerable to arbitrary file read when configured with Kubernetes authentication.Check if you run itEPSS 0.54%Mar 11, 2026
- Medium4.8A weakness has been identified in OpenAkita up to 1.24.3.Check if you run itEPSS 1.32%Mar 11, 2026
- Medium6.3A security flaw has been discovered in perfree go-fastdfs-web up to 1.3.7.Check if you run itEPSS 0.40%Mar 11, 2026
- Medium6.9yauzl (aka Yet Another Unzip Library) version 3.2.0 for Node.js contains an off-by-one error in the NTFS extended timestamp extra field parser within the getLastModDate() function.Check if you run itEPSS 0.57%Mar 11, 2026
- Medium5.3A vulnerability was identified in Jcharis Machine-Learning-Web-Apps up to a6996b634d98ccec4701ac8934016e8175b60eb5.Check if you run itEPSS 0.41%Mar 11, 2026
- Medium4.3Incorrect security UI in PictureInPicture in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page.Check if you run itEPSS 0.20%Mar 11, 2026
- Medium4.3Insufficient policy enforcement in DevTools in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.Check if you run itEPSS 0.19%Mar 11, 2026
- Medium5.3Insufficient policy enforcement in DevTools in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.Check if you run itEPSS 0.18%Mar 11, 2026
Sort