Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5The send_message.php endpoint in SourceCodester Simple Public Chat Room 1.0 is vulnerable to Cross-Site Request Forgery (CSRF).Check if you run itEPSS 0.16%Nov 10, 2025
- Medium6.5Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the wanMTU parameter in the sub_4F55C function.Check if you run itEPSS 0.40%Nov 10, 2025
- Medium6.5Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the SetSysTimeCfg function.Check if you run itEPSS 0.40%Nov 10, 2025
- High7.5Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function.Check if you run itEPSS 0.41%Nov 10, 2025
- High7.5In Open5GS 2.7.6, AMF crashes when receiving an abnormal NGSetupRequest message, resulting in denial of service.Check if you run itEPSS 0.34%Nov 10, 2025
- High7.5TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow in the addEffect parameter of the urldecode function.Check if you run itEPSS 0.40%Nov 10, 2025
- High7.5TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow in the ssid parameter of the urldecode function.Check if you run itEPSS 0.40%Nov 10, 2025
- High7.5Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the wpapsk_crypto parameter of the wlSetExternParameter function.Check if you run itEPSS 0.40%Nov 10, 2025
- High7.5Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the urls parameter of the get_parentControl_list_Info function.Check if you run itEPSS 0.40%Nov 10, 2025
- Medium6.5Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the deviceId parameter of the saveParentControlInfo function.Check if you run itEPSS 0.40%Nov 10, 2025
- Medium6.5BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-contCheck if you run itEPSS 0.31%Nov 10, 2025
- Medium5.3The Flexible Refund and Return Order for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a misconfigured capability check on the 'create_Check if you run itEPSS 0.27%Nov 8, 2025
- Low2.7Datasette is an open source multi-tool for exploring and publishing data.Check if you run itEPSS 0.41%Nov 7, 2025
- Medium6.5Improper handling of malformed Connection Request with the interval set to be 1 (which supposed to be illegal) and the chM 0x7CFFFFFFFF triggers a crash.Check if you run itEPSS 0.20%Nov 7, 2025
- Medium4.7KubeVirt is a virtual machine management add-on for Kubernetes.Check if you run itEPSS 0.15%Nov 7, 2025
- High7.5Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.65%Nov 7, 2025
- Low1.2A cross-site request forgery (CSRF) vulnerability has been reported to affect QuLog Center.Check if you run itEPSS 0.26%Nov 7, 2025
- Critical9.3SQL injection vulnerability in DIAL's CentrosNet v2.64.Check if you run itEPSS 0.29%Nov 7, 2025
- Medium6.5The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress is vulnerable to Insecure Direct Object Reference via the admin_post_donor_delete() functionCheck if you run itEPSS 0.27%Nov 7, 2025
- High8.8The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the idonate_donor_Check if you run itEPSS 0.36%Nov 7, 2025
- High7.6A Broken Object Level Authorization (BOLA) vulnerability was discovered in the tRPC project mutation APIs (update, delete, add/remove tag) of the Onlook web application 0.2.32.Check if you run itEPSS 0.31%Nov 7, 2025
- Medium6.5The change password functionality at /pet_grooming/admin/change_pass.php in SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross-Site Request Forgery (CSRF) aCheck if you run itEPSS 0.16%Nov 7, 2025
- Medium6.5The SourceCodester Leads Manager Tool v1.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks that allow unauthorized state-changing operations.Check if you run itEPSS 0.16%Nov 7, 2025
- High7.5A Local File Inclusion (LFI) vulnerability has been identified in tQuadra CMS 4.2.1117.Check if you run itEPSS 0.49%Nov 7, 2025
- High7.5AstrBot Project v3.5.22 contains a directory traversal vulnerability.Check if you run itEPSS 0.83%Nov 7, 2025
Sort