Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Improper Check for Unusual or Exceptional Conditions vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNM…Check if you run itEPSS 0.20%Jan 7, 2026
- Medium5.3As the service interaction is performed without authentication, an attacker with some knowledge of the protocol could obtain information about the charger via OCPP v1.6.Check if you run itEPSS 0.25%Jan 7, 2026
- High8.8iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles.Check if you run itEPSS 0.38%Jan 7, 2026
- High7.8iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles.Check if you run itEPSS 0.20%Jan 7, 2026
- Medium5.5iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles.Check if you run itEPSS 0.19%Jan 7, 2026
- Medium5.5iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles.Check if you run itEPSS 0.20%Jan 7, 2026
- Medium6.1iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles.Check if you run itEPSS 0.19%Jan 7, 2026
- Medium5.5iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles.Check if you run itEPSS 0.22%Jan 7, 2026
- Medium5.3Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection EnCheck if you run itEPSS 0.60%Jan 7, 2026
- Medium5.8Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection EnCheck if you run itEPSS 0.67%Jan 7, 2026
- Critical9.6A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications.Check if you run itEPSS 1.33%Jan 7, 2026
- Critical9.2An attacker with access to the system's internal network can cause a denial of service on the system by making two concurrent connections through the Telnet service.Check if you run itEPSS 0.36%Jan 7, 2026
- Medium4.9In HCL DevOps Deploy 8.1.2.0 through 8.1.2.3, a user with LLM configuration privileges may be able to recover a credential previously saved for performing authenticated LLM QueriesCheck if you run itEPSS 0.26%Jan 7, 2026
- High8.2The massive sending of ICMP requests causes a denial of service on one of the boards from the EVCharger that allows control the EV interfaces.Check if you run itEPSS 0.30%Jan 7, 2026
- Critical9.2The massive sending of ARP requests causes a denial of service on one board of the charger that allows control of the EV interfaces.Check if you run itEPSS 0.37%Jan 7, 2026
- Medium5.1Stored cross-site scripting (XSS, CWE-79) in the survey content and administration functionality in Data Illusion Zumbrunn NGSurvey Enterprise Edition 3.6.4 on all supported platfoCheck if you run itEPSS 0.20%Jan 7, 2026
- Medium6.9Kieback&Peter Neutrino-GLT product is used for building management.Check if you run itEPSS 1.08%Jan 7, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Object Injection.This issue affects DZS Video Gallery: from n/a through 12.37.Check if you run itEPSS 0.38%Jan 7, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themesgrove WidgetKit Pro allows Reflected XSS.This issue affects WidgetKit PrCheck if you run itEPSS 0.18%Jan 7, 2026
- Medium6.5Missing Authorization vulnerability in POSIMYTH Innovation The Plus Addons for Elementor Pro theplus_elementor_addon allows Exploiting Incorrectly Configured Access Control SecuritCheck if you run itEPSS 0.21%Jan 7, 2026
- Medium6.4Path Traversal: '.../...//' vulnerability in SigmaPlugin Advanced Database Cleaner PRO allows Path Traversal.This issue affects Advanced Database Cleaner PRO: from n/a through 3.2.Check if you run itEPSS 0.28%Jan 7, 2026
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mojoomla WPCHURCH allows Blind SQL Injection.This issue affects WPCHURCH: fromCheck if you run itEPSS 0.28%Jan 7, 2026
- None0.0Not usedCheck if you run itEPSS 0.00%Jan 7, 2026
- None0.0Not usedCheck if you run itEPSS 0.00%Jan 7, 2026
- None0.0Not usedCheck if you run itEPSS 0.00%Jan 7, 2026
Sort