Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.) plugin for WordPress is vulnerable to unauthorized modificaCheck if you run itEPSS 0.21%Oct 31, 2025
- High7.5Scrapy versions up to 2.13.2 are vulnerable to a denial of service (DoS) attack due to a flaw in its brotli decompression implementation.Check if you run itEPSS 0.53%Oct 31, 2025
- Critical9.8Improper Privilege ManagementPatch nowKEVEPSS 9.61%Oct 31, 2025
- Medium6.9cryptidy through 1.2.4 allows code execution via untrusted data because pickle.loads is used.Check if you run itEPSS 0.25%Oct 31, 2025
- Medium6.5Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 does not properly invalidate active user sessions after a password change.Check if you run itEPSS 0.27%Oct 31, 2025
- Medium6.3Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 suffers from insufficient server-side authorization.Check if you run itEPSS 0.20%Oct 31, 2025
- High7.5Summer Pearl Group Vacation Rental Management Platform prior to 1.0.2 is susceptible to a Slowloris-style Denial-of-Service (DoS) condition in the HTTP connection handling layer, wCheck if you run itEPSS 0.40%Oct 31, 2025
- High7.5Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_421BAC function.Check if you run itEPSS 0.41%Oct 31, 2025
- High7.5Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the http_host parameter in the sub_426EF8 function.Check if you run itEPSS 0.41%Oct 31, 2025
- High7.5Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_425400 function.Check if you run itEPSS 0.41%Oct 31, 2025
- High7.5Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the password parameter in the sub_426EF8 function.Check if you run itEPSS 0.41%Oct 31, 2025
- High7.5Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_422880 function.Check if you run itEPSS 0.41%Oct 31, 2025
- High7.5Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_42396C function.Check if you run itEPSS 0.41%Oct 31, 2025
- High7.5Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the wifiOff parameter in the sub_4232EC function.Check if you run itEPSS 0.41%Oct 31, 2025
- High7.5Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the wifiOff parameter in the sub_421A04 function.Check if you run itEPSS 0.41%Oct 31, 2025
- High7.5Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the urldecode function.Check if you run itEPSS 0.41%Oct 31, 2025
- High7.5Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub_4222E0 function.Check if you run itEPSS 0.41%Oct 31, 2025
- High7.5Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub_421CF0 function.Check if you run itEPSS 0.41%Oct 31, 2025
- High7.5Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the form_fast_setting_wifi_set function.Check if you run itEPSS 0.40%Oct 31, 2025
- High7.5Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the deviceId parameter in the get_parentControl_list_Info function.Check if you run itEPSS 0.40%Oct 31, 2025
- Medium6.1A reflected cross-site scripting (XSS) vulnerability in BEO GmbH BEO Atlas Einfuhr Ausfuhr 3.0 allows attackers to execute arbitrary code in the context of a user's browser via injCheck if you run itEPSS 0.23%Oct 31, 2025
- High7.8DLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.dll used by sketchup_webhelper.exe.Check if you run itEPSS 0.16%Oct 31, 2025
- Critical9.8Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader.Check if you run itEPSS 0.40%Oct 31, 2025
- High7.1Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader.Check if you run itEPSS 0.18%Oct 31, 2025
- High7.5Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader.Check if you run itEPSS 0.43%Oct 31, 2025
Sort