Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) 8.1 before 8.1.2.2 could allow an authenticated user to obtain sensitive information about configuration on the system.Check if you run itEPSS 0.24%Sep 2, 2025
- Medium6.9A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1.Check if you run itEPSS 0.45%Sep 2, 2025
- High8.5There is an out of bounds write vulnerability due to improper bounds checking in displ2.dll when parsing a DSB file with Digilent DASYLab.Check if you run itEPSS 0.27%Sep 2, 2025
- High8.5There is a heap-based Buffer Overflow vulnerability due to improper bounds checking when parsing a DSB file with Digilent DASYLab.Check if you run itEPSS 0.27%Sep 2, 2025
- High8.5There is a deserialization of untrusted data vulnerability in Digilent DASYLab.Check if you run itEPSS 0.51%Sep 2, 2025
- High8.5There is an out of bounds write vulnerability due to improper bounds checking resulting in an invalid source address when parsing a DSB file with Digilent DASYLab.Check if you run itEPSS 0.27%Sep 2, 2025
- High8.5There is an out of bounds write vulnerability due to improper bounds checking resulting in an invalid address when parsing a DSB file with Digilent DASYLab.Check if you run itEPSS 0.27%Sep 2, 2025
- High8.5There is an out of bounds write vulnerability due to improper bounds checking resulting in invalid data when parsing a DSB file with Digilent DASYLab.Check if you run itEPSS 0.27%Sep 2, 2025
- High8.5There is an out of bounds write vulnerability due to improper bounds checking resulting in a large destination address when parsing a DSB file with Digilent DASYLab.Check if you run itEPSS 0.28%Sep 2, 2025
- Medium6.3A vulnerability was determined in Tenda CP6 11.10.00.243.Check if you run itEPSS 0.34%Sep 2, 2025
- Critical9.4The SunPower PVS6's BluetoothLE interface is vulnerable due to its use of hardcoded encryption parameters and publicly accessible protocol details.Check if you run itEPSS 0.17%Sep 2, 2025
- High7.5A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters.Check if you run itEPSS 2.33%Sep 2, 2025
- Medium4.7Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft ProKuafor allows Resource Leak Exposure.Check if you run itEPSS 0.24%Sep 2, 2025
- Medium4.3Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft ProKuaför allows Cross-Site Scripting (XSS).Check if you run itEPSS 0.19%Sep 2, 2025
- High8.2A vulnerability has been identified within Rancher Manager in which it did not enforce request body size limits on certain public (unauthenticated) and authenticated API endpoints.Check if you run itEPSS 0.52%Sep 2, 2025
- High8.6Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft OctoCloud allows Authentication Bypass.Check if you run itEPSS 0.35%Sep 2, 2025
- High7.7Unauthorized disclosure of sensitive data: Any user with or permissions on resources could retrieve Helm values containing credentials or other secrets.Check if you run itEPSS 0.24%Sep 2, 2025
- Medium4.7Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft OctoCloud allows Resource Leak Exposure.Check if you run itEPSS 0.24%Sep 2, 2025
- Medium4.7Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing.Check if you run itEPSS 0.15%Sep 2, 2025
- Medium4.3Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft OctoCloud allows Cross-Site Scripting (XSS).Check if you run itEPSS 0.19%Sep 2, 2025
- Critical9.3E2 Facility Management Systems use a proprietary protocol that allows for unauthenticated file operations on any file in the file system.Check if you run itEPSS 0.35%Sep 2, 2025
- High8.6E3 Site Supervisor Control (firmware version < 2.31F01) firmware upgrade packages are unsigned.Check if you run itEPSS 0.22%Sep 2, 2025
- Critical9.2E3 Site Supervisor Control (firmware version < 2.31F01) generates the root linux password on each boot.Check if you run itEPSS 0.48%Sep 2, 2025
- Medium6.9E3 Site Supervisor Control (firmware version < 2.31F01) contains a hidden API call in the application services that enables SSH and Shellinabox, which exist but are disabled by defCheck if you run itEPSS 0.36%Sep 2, 2025
- High8.7E3 Site Supervisor Control (firmware version < 2.31F01) MGW contains an API call that lacks input validation.Check if you run itEPSS 0.34%Sep 2, 2025
Sort