Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8The 2wcom IP-4c 2.15.5 device suffers from a Broken Access Control vulnerability.Check if you run itEPSS 0.33%Sep 22, 2025
- Critical9.8The Blackmagic Web Presenter HD firmware version 3.3 exposes sensitive information via an unauthenticated Telnet service on port 9977.Check if you run itEPSS 0.53%Sep 22, 2025
- High8.8Creacast Creabox Manager contains a critical authentication flaw that allows an attacker to bypass login validation.Check if you run itEPSS 0.49%Sep 22, 2025
- Medium6.5The 2wcom IP-4c 2.15.5 device's web interface includes an information disclosure vulnerability.Check if you run itEPSS 0.37%Sep 22, 2025
- Critical9.8Blackmagic Web Presenter version 3.3 exposes a Telnet service on port 9977 that accepts unauthenticated commands.Check if you run itEPSS 0.64%Sep 22, 2025
- High8.8The Sound4 PULSE-ECO AES67 1.22 web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update package.Check if you run itEPSS 0.35%Sep 22, 2025
- High7.5Creacast Creabox Manager 4.4.4 exposes sensitive configuration data via a publicly accessible endpoint /get.Check if you run itEPSS 0.40%Sep 22, 2025
- Medium5.4Stocky POS with Inventory Management & HRM (ui-lib) version 5.0 is affected by a Stored Cross-Site Scripting (XSS) vulnerability within the Products module available to authenticatCheck if you run itEPSS 0.26%Sep 22, 2025
- Medium5.4A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0.Check if you run itEPSS 0.26%Sep 22, 2025
- Critical9.8A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0.Check if you run itEPSS 0.48%Sep 22, 2025
- High7.3Cross-Site Scripting (XSS) vulnerability was discovered in the Ajax transaction manager endpoint of ARD.Check if you run itEPSS 0.44%Sep 22, 2025
- Medium6.1Cross-Site Scripting (XSS) vulnerability was discovered in the meal reservation service ARD.Check if you run itEPSS 0.35%Sep 22, 2025
- Medium6.3SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Lign before v.2025-04-23 allows a remote attacker to escalate privileges via the GET parameters in index.Check if you run itEPSS 0.37%Sep 22, 2025
- UnknownCVE-2025-54914 is named in a Cloudflare managed-rules release.Check if you run itEPSS 2.51%Sep 22, 2025
- Medium5.4Cross Site Scripting vulnerability in PivotX CMS v.3.0.0 RC 3 allows a remote attacker to execute arbitrary code via the subtitle field.Check if you run itEPSS 4.20%Sep 22, 2025
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.74%Sep 22, 2025
- High7.8Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the dlt_linuxsll2_cleanup() function in plugins/dlt_linuxsll2/linuxsll2.c.Check if you run itEPSS 0.18%Sep 22, 2025
- UnknownImproper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 20.42%Sep 22, 2025
- High8.8In 2wcom IP-4c 2.16, the web interface allows admin and manager users to execute arbitrary code as root via a ping or traceroute field on the TCP/IP screen.Check if you run itEPSS 9.14%Sep 22, 2025
- Medium5.3A vulnerability was identified in huggingface LeRobot up to 0.3.3.Check if you run itEPSS 0.29%Sep 21, 2025
- Medium5.3A vulnerability was determined in jeecgboot JimuReport up to 2.1.2.Check if you run itEPSS 0.62%Sep 21, 2025
- Medium5.3A vulnerability was found in jeecgboot JimuReport up to 2.1.2.Check if you run itEPSS 0.44%Sep 21, 2025
- Low2.0A vulnerability was detected in CosmodiumCS OnlyRAT up to 3.2.Check if you run itEPSS 1.13%Sep 21, 2025
- High7.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience PlatformCheck if you run itEPSS 0.38%Sep 21, 2025
- Medium5.3A vulnerability has been found in h2oai h2o-3 up to 3.46.08.Check if you run itEPSS 0.54%Sep 21, 2025
Sort