Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Tenda o3_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 12.62%Jul 10, 2025
- High8.2The Honeywell Experion PKS contains an Integer Underflow vulnerability in the component Control Data Access (CDA).Check if you run itEPSS 0.37%Jul 10, 2025
- High8.2The Honeywell Experion PKS and OneWireless WDM contains a Deployment of Wrong Handler vulnerability in the component Control Data Access (CDA).Check if you run itEPSS 0.55%Jul 10, 2025
- Critical9.4The Honeywell Experion PKS and OneWireless WDM contains an Integer Underflow vulnerability in the component Control Data Access (CDA).Check if you run itEPSS 0.79%Jul 10, 2025
- Medium6.5The Honeywell Experion PKS and OneWireless WDM contains Sensitive Information in Resource vulnerability in the component Control Data Access (CDA).Check if you run itEPSS 0.27%Jul 10, 2025
- High8.6The Honeywell Experion PKS and OneWireless WDM contains a Memory Buffer vulnerability in the component Control Data Access (CDA).Check if you run itEPSS 0.50%Jul 10, 2025
- Medium5.3A vulnerability classified as critical has been found in code-projects Library System 1.0.Check if you run itEPSS 0.39%Jul 10, 2025
- High7.5The Honeywell Experion PKS contains an Uninitialized Variable in the common Epic Platform Analyzer (EPA) communications.Check if you run itEPSS 0.42%Jul 10, 2025
- High7.5cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.59%Jul 10, 2025
- Medium6.3cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.52%Jul 10, 2025
- High8.7Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player.Check if you run itEPSS 0.51%Jul 10, 2025
- High8.7Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player.Check if you run itEPSS 0.53%Jul 10, 2025
- High8.8Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player.Check if you run itEPSS 0.82%Jul 10, 2025
- High8.9llama.cpp is an inference of several LLM models in C/C++.Check if you run itEPSS 0.36%Jul 10, 2025
- Medium5.3A vulnerability was found in code-projects Library System 1.0.Check if you run itEPSS 0.39%Jul 10, 2025
- Critical9.3An OS command injection vulnerability exists in Mako Server versions 2.5 and 2.6, specifically within the tutorial interface provided by the examples/save.lsp endpoint.Check if you run itEPSS 6.22%Jul 10, 2025
- High8.6An unrestricted file upload vulnerability exists in ProcessMaker versions prior to 3.5.4 due to improper handling of uploaded plugin archives.Check if you run itEPSS 1.72%Jul 10, 2025
- High7.1A path traversal vulnerability exists in Riverbed SteelHead VCX appliances (confirmed in VCX255U 9.6.0a) due to improper input validation in the log filtering functionality exposedCheck if you run itEPSS 1.27%Jul 10, 2025
- Critical9.3An unauthenticated command injection vulnerability exists in Serviio Media Server versions 1.4 through 1.8 on Windows, in the /rest/action API endpoint exposed by the console compoCheck if you run itEPSS 4.36%Jul 10, 2025
- Critical9.3An unauthenticated command injection vulnerability exists in VICIdial versions 2.9 RC1 through 2.13 RC1, within the vicidial_sales_viewer.php component when password encryption isCheck if you run itEPSS 1.64%Jul 10, 2025
- Medium6.9Fullscreen API Spoofing and UI Redressing in the handling of Fullscreen API and UI rendering in OpenAI Operator SaaS on Web allows a remote attacker to capture sensitive user inputCheck if you run itEPSS 0.36%Jul 10, 2025
- Medium6.9A vulnerability was found in code-projects LifeStyle Store 1.0.Check if you run itEPSS 0.49%Jul 10, 2025
- Medium6.5Classic buffer overflow in certain Zoom Clients for Windows may allow an authorized user to conduct a denial of service via network access.Check if you run itEPSS 0.55%Jul 10, 2025
- High7.4Improper certificate validation in Zoom Workplace for Linux before version 6.4.13 may allow an unauthorized user to conduct an information disclosure via network access.Check if you run itEPSS 0.28%Jul 10, 2025
- Medium6.5A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().Check if you run itEPSS 0.77%Jul 10, 2025
Sort