Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow in the addEffect parameter of the urldecode function.Check if you run itEPSS 0.40%Nov 10, 2025
- High7.5TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow in the ssid parameter of the urldecode function.Check if you run itEPSS 0.40%Nov 10, 2025
- High7.5Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the wpapsk_crypto parameter of the wlSetExternParameter function.Check if you run itEPSS 0.40%Nov 10, 2025
- High7.5Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the urls parameter of the get_parentControl_list_Info function.Check if you run itEPSS 0.40%Nov 10, 2025
- Medium6.5Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the deviceId parameter of the saveParentControlInfo function.Check if you run itEPSS 0.40%Nov 10, 2025
- Medium6.5BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-contCheck if you run itEPSS 0.31%Nov 10, 2025
- Medium6.5An issue in Sublime HQ Pty Ltd Sublime Text 4 4200 allows authenticated attackers with low-level privileges to escalate privileges to Administrator via replacing the uninstall fileCheck if you run itEPSS 0.29%Nov 10, 2025
- Critical9.1Gladinet Triofox Improper Access Control VulnerabilityPatch nowKEVEPSS 95.75%Nov 10, 2025
- Unknowntamronos tamronos Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 7.08%Nov 10, 2025
- Critical9.3skittles employee_records_system Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.42%Nov 10, 2025
- High8.7rainbowfishsoftware pacsone_server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.99%Nov 10, 2025
- Medium5.3A vulnerability has been found in OpenClinica Community Edition up to 3.12.2/3.13.Check if you run itEPSS 0.57%Nov 9, 2025
- Medium4.8A flaw has been found in qianfox FoxCMS up to 1.2.16.Check if you run itEPSS 0.36%Nov 9, 2025
- Medium6.3A vulnerability was detected in EverShop up to 2.0.1.Check if you run itEPSS 0.50%Nov 9, 2025
- Low2.3A security flaw has been discovered in yungifez Skuul School Management System up to 2.6.5.Check if you run itEPSS 0.41%Nov 9, 2025
- Medium5.3A vulnerability was identified in TOZED ZLT T10 T10PLUS_3.04.15.Check if you run itEPSS 0.60%Nov 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: crypto: rng - Ensure set_ent is always present Ensure that set_ent is always set since only drbg provides it.Check if you run itEPSS 0.22%Nov 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: serial: qcom-geni: Fix blocked task Revert commit 1afa70632c39 ("serial: qcom-geni: Enable PM runtime for serialCheck if you run itEPSS 0.18%Nov 9, 2025
- Medium5.3A vulnerability was determined in Sangfor Operation and Maintenance Security Management System 3.0.Check if you run itEPSS 5.06%Nov 8, 2025
- High7.1A vulnerability was found in 70mai X200 up to 20251019.Check if you run itEPSS 0.46%Nov 8, 2025
- Medium5.1A vulnerability has been found in aaPanel BaoTa up to 11.2.x.Check if you run itEPSS 0.27%Nov 8, 2025
- Medium5.1A flaw has been found in code-projects Responsive Hotel Site 1.0.Check if you run itEPSS 0.41%Nov 8, 2025
- High7.2The Alex Reservations: Smart Restaurant Booking plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the /wp-json/srr/v1/app/upload/fCheck if you run itEPSS 0.69%Nov 8, 2025
- High7.2The Mail Mint plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the process_contact_attribute_import function in all versions up tCheck if you run itEPSS 0.56%Nov 8, 2025
- Medium4.3The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '/envira-coCheck if you run itEPSS 0.21%Nov 8, 2025
Sort