Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Incorrect authorization vulnerability in TCMAN's GIM v11.Check if you run itEPSS 0.27%Jun 9, 2025
- Medium6.9A vulnerability classified as problematic was found in Lucky LM-520-SC, LM-520-FSC and LM-520-FSC-SAM up to 20250321.Check if you run itEPSS 0.47%Jun 9, 2025
- High8.7A vulnerability classified as critical has been found in TP-LINK Technologies TL-IPC544EP-W4 1.0.9 Build 240428 Rel 69493n.Check if you run itEPSS 1.03%Jun 9, 2025
- High8.3Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module.Check if you run itEPSS 1.64%Jun 9, 2025
- High8.3Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports.Check if you run itEPSS 1.64%Jun 9, 2025
- High8.3Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports.Check if you run itEPSS 1.64%Jun 9, 2025
- Medium4.3Zohocorp ManageEngine OpManager, NetFlow Analyzer, Network Configuration Manager, Firewall Analyzer and OpUtils versions 128565 and below are vulnerable to Reflected XSS on the logCheck if you run itEPSS 0.25%Jun 9, 2025
- Medium5.3A vulnerability was detected in eCharge Hardy Barth Salia PLCC up to 2.3.81.Check if you run itEPSS 0.32%Jun 9, 2025
- Critical9.6Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and prior are vulnerable to Remote code execution in the Content Search module.Check if you run itEPSS 2.23%Jun 9, 2025
- Medium6.9A vulnerability was found in eGauge EG3000 Energy Monitor 3.6.3.Check if you run itEPSS 0.47%Jun 9, 2025
- Medium5.1A Reflected Cross-Site Scripting (XSS) vulnerability has been found in Bagisto v2.0.0.Check if you run itEPSS 0.23%Jun 9, 2025
- Medium6.9A vulnerability was found in Papendorf SOL Connect Center 3.3.0.0 and classified as problematic.Check if you run itEPSS 0.47%Jun 9, 2025
- Medium6.9A vulnerability has been found in TRENDnet TV-IP121W 1.1.1 Build 36 and classified as critical.Check if you run itEPSS 0.46%Jun 9, 2025
- High8.6A vulnerability, which was classified as critical, was found in RT-Thread 5.1.0.Check if you run itEPSS 0.82%Jun 9, 2025
- High8.6A vulnerability, which was classified as critical, has been found in RT-Thread 5.1.0.Check if you run itEPSS 1.08%Jun 9, 2025
- High8.7Smart Parking Management System from Honding Technology has a Missing Authorization vulnerability, allowing remote attackers with regular privileges to access a specific functionalCheck if you run itEPSS 0.63%Jun 9, 2025
- High8.6A vulnerability classified as critical was found in RT-Thread 5.1.0.Check if you run itEPSS 1.11%Jun 9, 2025
- Medium5.7The AuthPolicy metadata on Red Hat Connectivity Link contains an object which stores secretes, however it assumes those secretes are already in the kuadrant-system instead of copyiCheck if you run itEPSS 0.21%Jun 9, 2025
- Medium5.7A Developer persona can bring down the Authorino service, preventing the evaluation of all AuthPolicies on the clusterCheck if you run itEPSS 0.33%Jun 9, 2025
- Medium5.7The Authorino service in the Red Hat Connectivity Link is the authorization service for zero trust API security.Check if you run itEPSS 0.27%Jun 9, 2025
- Medium6.5There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks.Check if you run itEPSS 0.46%Jun 9, 2025
- Medium6.1The Broadstreet WordPress plugin before 1.51.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which couCheck if you run itEPSS 0.51%Jun 9, 2025
- Medium4.8The Newsletter WordPress plugin before 8.85 does not sanitise and escape some of its Form settings, which could allow high privilege users such as admin to perform Stored Cross-SitCheck if you run itEPSS 0.26%Jun 9, 2025
- Medium4.8The Newsletter WordPress plugin before 8.8.5 does not validate and escape some of its Widget options before outputting them back in a page/post where the block is embed, which coulCheck if you run itEPSS 0.26%Jun 9, 2025
- Medium6.5A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request.Check if you run itEPSS 0.49%Jun 9, 2025
Sort