Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Adminer 4.8.1, when using Monolog for logging, allows a Denial of Service (memory consumption) via a crafted serialized payload (e.g., using s:1000000000), leading to a PHP ObjectCheck if you run itEPSS 0.73%Aug 25, 2025
- Medium5.3DASAN GPON ONU H660WM OS version H660WMR210825 Hardware version DS-E5-583-A1 was discovered to contain insecure default credentials in the modem's control panel.Check if you run itEPSS 0.29%Aug 25, 2025
- Medium6.5Incorrect access control in the component /cgi-bin/system_diagnostic_main.asp of DASAN GPON ONU H660WM H660WMR210825 allows attackers to access sensitive information.Check if you run itEPSS 0.33%Aug 25, 2025
- High7.2D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the ping6 function.Check if you run itEPSS 2.10%Aug 25, 2025
- Medium6.5D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the ping function.Check if you run itEPSS 1.36%Aug 25, 2025
- Medium5.3Insecure default credentials for the Adminsitrator account of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to escalate privileges via a bruteforce attCheck if you run itEPSS 0.59%Aug 25, 2025
- Medium5.3Incorrect access control in the Maintenance module of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows authenticated attackers with low-level privileges to arbitrarCheck if you run itEPSS 0.58%Aug 25, 2025
- Medium5.3A command injection vulnerability in the EXE parameter of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to execute arbitrary commands via supplying a cCheck if you run itEPSS 1.74%Aug 25, 2025
- Medium6.8D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the traceroute6 function.Check if you run itEPSS 1.65%Aug 25, 2025
- High7.2D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the backup function.Check if you run itEPSS 2.13%Aug 25, 2025
- Critical9.8Incorrect access control in the DELT_file.xgi endpoint of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to modify arbitrary settings within the device'Check if you run itEPSS 0.62%Aug 25, 2025
- Critical9.8Incorrect access control in the config.xgi function of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to download the configuration file via providing aCheck if you run itEPSS 0.60%Aug 25, 2025
- High7.5PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the getThemeFileContent function.Check if you run itEPSS 0.36%Aug 25, 2025
- High7.5PerfreeBlog v4.0.11 has a directory traversal vulnerability in the getThemeFilesByName function.Check if you run itEPSS 0.91%Aug 25, 2025
- UnknownCVE-2024-55661 is named in a Cloudflare managed-rules release.Check this weekEPSS 30.65%Aug 25, 2025
- Medium5.1Rebuild v3.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the type parameter in the com.rebuild.web.admin.rbstore.RBStoreController#loadDataIndex method.Check if you run itEPSS 0.27%Aug 25, 2025
- Medium6.5Incorrect access control in the prehandle function of Rebuild v3.7.7 allows attackers to bypass authentication via a crafted GET request sent to /commons/ip-location.Check if you run itEPSS 0.43%Aug 25, 2025
- Medium6.1An issue was discovered in Mahara 24.04 before 24.04.2 and 23.04 before 23.04.7.Check if you run itEPSS 0.25%Aug 25, 2025
- High7.5Mahara before 22.10.4 and 23.x before 23.04.4 allows information disclosure if the experimental HTML bulk export is used via the administration interface or via the CLI, and the reCheck if you run itEPSS 0.41%Aug 25, 2025
- Medium6.9A security vulnerability has been detected in YiFang CMS up to 2.0.5.Check if you run itEPSS 0.51%Aug 24, 2025
- Medium5.3A weakness has been identified in givanz Vvveb up to 1.0.7.2.Check if you run itEPSS 0.53%Aug 24, 2025
- Medium4.8A security flaw has been discovered in ckolivas lrzip up to 0.651.Check if you run itEPSS 0.28%Aug 24, 2025
- Medium5.3A vulnerability was identified in wangsongyan wblog 0.0.1.Check if you run itEPSS 0.28%Aug 24, 2025
- Medium4.8A flaw has been found in PoDoFo 1.1.0-dev.Check if you run itEPSS 0.22%Aug 24, 2025
- High8.7A vulnerability was detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001.Check if you run itEPSS 1.05%Aug 24, 2025
Sort