Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the cloneType parameter in the fromAdvSetMacMtuWan function.Check if you run itEPSS 0.42%Oct 2, 2025
- High7.5Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the mac parameter in the fromAdvSetMacMtuWan function.Check if you run itEPSS 0.49%Oct 2, 2025
- High7.5Flock Safety Falcon and Sparrow License Plate Readers OPM1.171019.026 ship with development Wi-Fi credentials (test_flck) stored in cleartext in production firmware.Check if you run itEPSS 0.31%Oct 2, 2025
- Critical9.8The Flock Safety DetectionProcessing com.flocksafety.android.objects application 6.35.33 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI ComputCheck if you run itEPSS 0.67%Oct 2, 2025
- Medium6.2The Flock Safety Pisco com.flocksafety.android.pisco application 6.21.11 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices) has aCheck if you run itEPSS 0.17%Oct 2, 2025
- Medium5.1FrostWire 6.14.0-build-326 for macOS contains permissive entitlements (allow-dyld-environment-variables, disable-library-validation) that allow unprivileged local attackers to injeCheck if you run itEPSS 0.14%Oct 2, 2025
- Medium6.5VitaraCharts 5.3.5 is vulnerable to Server-Side Request Forgery in fileLoader.jsp.Check if you run itEPSS 0.38%Oct 2, 2025
- Medium6.5ERPNEXT v15.67.0 was discovered to contain multiple SQL injection vulnerabilities in the /api/method/frappe.desk.reportview.get endpoint via the order_by and group_by parameters.Check if you run itEPSS 0.31%Oct 2, 2025
- Medium6.5Frappe Framework v15.72.4 was discovered to contain a SQL injection vulnerability via the fieldname parameter in the frappe.client.get_value API endpoint and a crafted script to thCheck if you run itEPSS 0.31%Oct 2, 2025
- Medium6.5YOSHOP 2.0 suffers from an unauthenticated SQL injection in the goodsIds parameter of the /api/goods/listByIds endpoint.Check if you run itEPSS 0.49%Oct 2, 2025
- High7.5YOSHOP 2.0 allows unauthenticated information disclosure via comment-list API endpoints in the Goods module.Check if you run itEPSS 0.54%Oct 2, 2025
- Medium6.5An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobile applications to connect via Bluetooth Low Energy (BLE) witCheck if you run itEPSS 0.33%Oct 2, 2025
- High7.1The Matrix specification before 1.16 (i.e., with a room version before 12) lacks create event uniqueness.Check if you run itEPSS 0.34%Oct 2, 2025
- High7.1The Matrix specification before 1.16 (i.e., with a room version before 12 and State Resolution before 2.1) has deficient state resolution.Check if you run itEPSS 0.47%Oct 2, 2025
- High7.2SSH Tectia Server before 6.6.6 sometimes allows attackers to read and alter a user's session traffic.Check if you run itEPSS 0.24%Oct 2, 2025
- High7.5TP-Link AX1800 WiFi 6 Router (Archer AX21) devices allow unauthenticated attackers (on the LAN) to execute arbitrary code as root via the db_dir field to minidlnad.Check if you run itEPSS 3.44%Oct 2, 2025
- Critical9.3RISC Zero is a zero-knowledge verifiable general computing platform based on zk-STARKs and the RISC-V microarchitecture.Check if you run itEPSS 0.46%Oct 1, 2025
- Medium4.3TS3 Manager is modern web interface for maintaining Teamspeak3 servers.Check if you run itEPSS 0.25%Oct 1, 2025
- Low2.1Weblate is a web based localization tool.Check if you run itEPSS 0.39%Oct 1, 2025
- Critical9.2Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.Check if you run itEPSS 4.54%Oct 1, 2025
- Medium6.1OpenPLC_V3 has a vulnerability in the enipThread function that occurs due to the lack of a return value.Check if you run itEPSS 0.21%Oct 1, 2025
- High7.8NVIDIA Installer for NvAPP for Windows contains a vulnerability in the FrameviewSDK installation process, where an attacker with local unprivileged access could modify files in theCheck if you run itEPSS 0.15%Oct 1, 2025
- Medium6.7NVIDIA Nsight Graphics for Windows contains a vulnerability in an ngfx component, where an attacker could cause a DLL highjacking attack.Check if you run itEPSS 0.16%Oct 1, 2025
- High7.5Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.Check if you run itEPSS 9.36%Oct 1, 2025
- High7.5Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.Check if you run itEPSS 0.60%Oct 1, 2025
Sort