Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681_B20230703) Router firmware within the cstecgi.cgi binary (sCheck if you run itEPSS 0.55%Nov 13, 2025
- Medium6.5TOTOLINK lr1200gb_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 6.61%Nov 13, 2025
- Medium6.5An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin.Check if you run itEPSS 3.49%Nov 13, 2025
- Medium6.5An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin.Check if you run itEPSS 3.53%Nov 13, 2025
- Medium6.5An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin.Check if you run itEPSS 3.63%Nov 13, 2025
- Medium6.5Lichess lila before commit 11b4c0fb00f0ffd823246f839627005459c8f05c (2025-06-02) contains a Server-Side Request Forgery (SSRF) vulnerability in the game export API.Check if you run itEPSS 0.34%Nov 13, 2025
- High8.7The Epson Stylus SX510W embedded web management service fails to properly handle consecutive ampersand characters in query parameters when accessing /PRESENTATION/HTML/TOP/INDEX.HTCheck if you run itEPSS 0.60%Nov 12, 2025
- High8.7Tinycontrol LAN Controller v3 (LK3) firmware versions up to 1.58a (hardware v3.8) contain a missing authentication vulnerability in the stm.cgi endpoint.Check if you run itEPSS 0.74%Nov 12, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() The cpufreq_cpu_put() call in update_qCheck if you run itEPSS 0.21%Nov 12, 2025
- High8.1In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().Check if you run itEPSS 0.58%Nov 12, 2025
- Medium4.6Tuleap is an Open Source Suite to improve management of software developments and collaboration.Check if you run itEPSS 0.15%Nov 12, 2025
- High8.7Evervault is a payment security solution.Check if you run itEPSS 0.15%Nov 12, 2025
- Medium4.6Tuleap is an Open Source Suite to improve management of software developments and collaboration.Check if you run itEPSS 0.15%Nov 12, 2025
- High8.1Open Access Management (OpenAM) is an access management solution.Check if you run itEPSS 0.35%Nov 12, 2025
- Low3.5In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, and 9.2.9 and Splunk Cloud Platform versions below 9.3.2411.116, 9.3.2408.124, 10.0.2503.5 and 10.1.2507.1, a low-privilegCheck if you run itEPSS 0.30%Nov 12, 2025
- Medium6.1In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, 9.2.9, and Splunk Cloud Platform versions below 10.0.2503.5, 9.3.2411.111, and 9.3.2408.121, an unauthenticated attacker cCheck if you run itEPSS 0.25%Nov 12, 2025
- Medium5.9If an attacker causes kdcproxy to connect to an attacker-controlled KDC server (e.g.Check if you run itEPSS 0.56%Nov 12, 2025
- High8.6If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by default, it will query SRV records in the DNS zone matching the reqCheck if you run itEPSS 0.49%Nov 12, 2025
- High7.3CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause elevated system access when a Web Admin user on the locCheck if you run itEPSS 0.14%Nov 12, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: tls: wait for pending async decryptions if tls_strp_msg_hold fails Async decryption calls tls_strp_msg_hold to cCheck if you run itEPSS 0.49%Nov 12, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: idpf: cleanup remaining SKBs in PTP flows When the driver requests Tx timestamp value, one of the first steps isCheck if you run itEPSS 0.19%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages() Currently, if find_and_map_user_pages() tCheck if you run itEPSS 0.15%Nov 12, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix bootup splat with separate_gpu_drm modparam The drm_gem_for_each_gpuvm_bo() call from lookup_vma()Check if you run itEPSS 0.20%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: No support of struct argument in trampoline programs The current implementation does not supportCheck if you run itEPSS 0.15%Nov 12, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix potential deadlock while nr_requests grown Allocate and free sched_tags while queue is freezed can dCheck if you run itEPSS 0.24%Nov 12, 2025
Sort