Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0This CVE ID is rejected.Open the advisorySep 9, 2025
- Medium6.4Element Plus Link component (el-link) through 2.10.6 implements insufficient input validation for the href attribute, creating a security abstraction gap that obscures URL-based atCheck if you run itEPSS 0.24%Sep 9, 2025
- Critical9.8A command injection vulnerability in FTP-Flask-python through 5173b68 allows unauthenticated remote attackers to execute arbitrary OS commands.Check if you run itEPSS 1.43%Sep 9, 2025
- High8.8The LB-Link BL-CPE300M AX300 4G LTE Router firmware version BL-R8800_B10_ALK_SL_V01.01.02P42U14_06 does not implement proper session handling.Check if you run itEPSS 0.43%Sep 9, 2025
- High7.5Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the String parameter in the formDeleteMeshNode function.Check if you run itEPSS 0.40%Sep 9, 2025
- Critical9.8Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the v17 parameter in the UploadCfg function.Check if you run itEPSS 0.47%Sep 9, 2025
- High7.5Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the delDhcpIndex parameter in the formDelDhcpRule function.Check if you run itEPSS 0.49%Sep 9, 2025
- High7.5Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the rules parameter in the dns_forward_rule_store function.Check if you run itEPSS 0.49%Sep 9, 2025
- Medium6.1Cross Site Scripting vulnerability in YesWiki v.4.54 allows a remote attacker to execute arbitrary code via a crafted payload to the meta configuration robots fieldCheck if you run itEPSS 0.39%Sep 9, 2025
- Medium6.1Halo v2.20.17 and before is vulnerable to Cross Site Scripting (XSS) in /halo_host/archives/{name}.Check if you run itEPSS 0.24%Sep 9, 2025
- Critical9.1halo v2.20.17 and before is vulnerable to server-side request forgery (SSRF) in /apis/uc.api.storage.halo.run/v1alpha1/attachments/-/upload-from-url.Check if you run itEPSS 0.37%Sep 9, 2025
- Medium6.1Halo prior to 2.20.13 allows bypassing file type detection and uploading malicious files such as .exe and .html files.Check if you run itEPSS 0.26%Sep 9, 2025
- High7.5An issue in TP-Link AX10 Ax1500 v.1.3.10 Build (20230130) allows a remote attacker to obtain sensitive informationCheck if you run itEPSS 0.50%Sep 9, 2025
- Low2.1A vulnerability was identified in ChanCMS up to 3.3.1.Check if you run itEPSS 0.34%Sep 8, 2025
- Critical9.3pREST (PostgreSQL REST), is an API that delivers an application on top of a Postgres database.Check if you run itEPSS 0.44%Sep 8, 2025
- Critical9.8The Doccure theme for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 1.5.0.Check if you run itEPSS 0.40%Sep 8, 2025
- Critical9.8The Doccure Core plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'doccure_temp_upload_to_media' function in all versions upCheck if you run itEPSS 0.64%Sep 8, 2025
- High8.8The Doccure theme for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'doccure_temp_file_uploader' function in all versions up to, anCheck if you run itEPSS 0.61%Sep 8, 2025
- Medium4.8A weakness has been identified in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.34%Sep 8, 2025
- Medium5.1A vulnerability has been found in code-projects Fruit Shop Management System 1.0.Check if you run itEPSS 0.29%Sep 8, 2025
- Medium6.9An integer overflow exists in the FTS5 https://sqlite.org/fts5.html extension.Check if you run itEPSS 0.37%Sep 8, 2025
- High8.8A vulnerability ( CVE-2025-21176 https://www.cve.org/CVERecord ) exists in DiaSymReader.dll due to buffer over-read.Check if you run itEPSS 0.77%Sep 8, 2025
- High8.1A vulnerability ( CVE-2024-38229 https://www.cve.org/CVERecord ) exists in EOL ASP.NET when closing an HTTP/3 stream while application code is writing to the response body, a raceCheck if you run itEPSS 0.60%Sep 8, 2025
- High7.5A vulnerability (CVE-2025-21172) exists in msdia140.dll due to integer overflow and heap-based overflow.Check if you run itEPSS 0.56%Sep 8, 2025
- Medium6.9A vulnerability was identified in D-Link DIR-852 up to 1.00CN B09.Check if you run itEPSS 1.01%Sep 8, 2025
Sort