Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0Not usedCheck if you run itEPSS 0.00%Nov 15, 2025
- None0.0Not usedCheck if you run itEPSS 0.00%Nov 15, 2025
- High8.7A vulnerability has been found in D-Link DIR-816L 2_06_b09_beta.Check if you run itEPSS 0.97%Nov 15, 2025
- Medium4.3The Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ajax_import_file functiCheck if you run itEPSS 0.26%Nov 15, 2025
- Medium6.5The Project Management, Team Collaboration, Kanban Board, Gantt Charts, Task Manager and More – WP Project Manager plugin for WordPress is vulnerable to time-based SQL Injection viCheck if you run itEPSS 0.30%Nov 15, 2025
- Medium4.3The All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic plugin for WordPress is vulnerable to unauthorized arbitrary media attachment deletion due to a miCheck if you run itEPSS 0.25%Nov 15, 2025
- Medium4.3The Qi Blocks plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the function in all versions up to, and including, 1.4.3.Check if you run itEPSS 0.23%Nov 15, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Check if you run itEPSS 0.00%Nov 15, 2025
- High7.2The vulnerability, if exploited, could allow an authenticated miscreant (with privilege of "aaConfigTools") to tamper with App Objects' help files and persist a cross-site scriptinCheck if you run itEPSS 0.17%Nov 14, 2025
- High8.3The vulnerability, if exploited, could allow a miscreant with read access to Edge Project files or Edge Offline Cache files to reverse engineer Edge users' app-native or Active DirCheck if you run itEPSS 0.10%Nov 14, 2025
- Medium6.0The affected product discloses device telemetry, configuration, and sensitive information via WebSocket traffic to unauthenticated users when they connect to a specific URL.Check if you run itEPSS 0.22%Nov 14, 2025
- High7.1The Brightpick Mission Control web application exposes hardcoded credentials in its client-side JavaScript bundle to Brightpick AI's documentation portal.Check if you run itEPSS 0.23%Nov 14, 2025
- High7.1The Brightpick Internal Logic Control web interface is accessible without requiring user authentication.Check if you run itEPSS 0.25%Nov 14, 2025
- High8.7General Industrial Controls Lynx+ Gateway is vulnerable to a cleartext transmission vulnerability that could allow an attacker to observe network traffic to obtain sensitive informCheck if you run itEPSS 0.31%Nov 14, 2025
- High8.7General Industrial Controls Lynx+ Gateway is missing critical authentication in the embedded web server which could allow an attacker to send GET requests to obtain sensitive devicCheck if you run itEPSS 0.39%Nov 14, 2025
- Critical9.2General Industrial Controls Lynx+ Gateway is missing critical authentication in the embedded web server which could allow an attacker to remotely reset the device.Check if you run itEPSS 0.60%Nov 14, 2025
- High8.8General Industrial Controls Lynx+ Gateway is vulnerable to a weak password requirement vulnerability, which may allow an attacker to execute a brute-force attack resulting in unautCheck if you run itEPSS 0.30%Nov 14, 2025
- High8.7Denver SHO-110 IP cameras expose a secondary HTTP service on TCP port 8001 that provides access to a '/snapshot' endpoint without authentication.Check if you run itEPSS 0.52%Nov 14, 2025
- High8.7IPCop versions up to and including 2.1.9 contain an authenticated remote code execution vulnerability within the web-based administration interface.Check if you run itEPSS 0.58%Nov 14, 2025
- High8.7Netis ADSL Router DL4322D firmware RTK 2.1.1 contains a buffer overflow vulnerability in the embedded FTP service that allows an authenticated remote user to trigger a denial of seCheck if you run itEPSS 0.52%Nov 14, 2025
- High8.7PLANEX CS-QP50F-ING2 smart cameras expose a configuration backup interface over HTTP that does not require authentication.Check if you run itEPSS 0.54%Nov 14, 2025
- High8.7Positive Technologies MaxPatrol 8 and XSpider contain a remote denial-of-service vulnerability in the client communication service on TCP port 2002.Check if you run itEPSS 0.49%Nov 14, 2025
- High8.7ReQuest Serious Play F3 Media Server versions 7.0.3.4968 (Pro), 7.0.2.4954, 6.5.2.4954, 6.4.2.4681, 6.3.2.4203, and 2.0.1.823 contain a remote denial-of-service vulnerability.Check if you run itEPSS 0.50%Nov 14, 2025
- Medium6.9Screen SFT DAB 600/C firmware versions up to and including 1.9.3 contain an improper access control on the user management API allows unauthenticated requests to retrieve structureCheck if you run itEPSS 0.37%Nov 14, 2025
- Critical9.3TG8 Firewall contains a pre-authentication remote code execution vulnerability in the runphpcmd.php endpoint.Check if you run itEPSS 0.84%Nov 14, 2025
Sort