Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.7Unitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt BLE packet data by using the df98b715d5c6ed2b25817b6f2554124a key and the 2841ae97419c2973296a0d4bdfe19a4f IV.Check if you run itEPSS 0.19%Sep 26, 2025
- High8.2Unitree Go2, G1, H1, and B2 devices through 2025-09-20 allow root OS command injection via the hostapd_restart.sh wifi_ssid or wifi_pass parameter (within restart_wifi_ap and restaCheck if you run itEPSS 1.08%Sep 26, 2025
- Medium4.0Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs.Check if you run itEPSS 0.41%Sep 26, 2025
- High7.1In DOXENSE WATCHDOC before 6.1.0.5094, private user puk codes can be disclosed for Active Directory registered users (there is hard-coded and predictable data).Check if you run itEPSS 0.14%Sep 26, 2025
- Critical10.0In DOXENSE WATCHDOC before 6.1.1.5332, Deserialization of Untrusted Data can lead to remote code execution through the .NET Remoting library in the Watchdoc administration interfacCheck if you run itEPSS 0.72%Sep 26, 2025
- Medium6.8PiranhaCMS 12.0 allows stored XSS in the Text content block of Standard and Standard Archive Pages via /manager/pages, enabling execution of arbitrary JavaScript in another user sCheck if you run itEPSS 0.33%Sep 26, 2025
- Medium6.1Todoist v8484 contains a stored cross-site scripting (XSS) vulnerability in the avatar upload functionality.Check if you run itEPSS 0.24%Sep 26, 2025
- Medium6.8Mercusys MW305R 3.30 and below is has a Transport Layer Security (TLS) certificate private key disclosure.Check if you run itEPSS 0.20%Sep 26, 2025
- High8.8An issue was discovered in DIR-823 firmware 20250416.Check if you run itEPSS 0.41%Sep 26, 2025
- High8.8Wavlink M86X3A_V240730 contains a buffer overflow vulnerability in the /cgi-bin/ExportAllSettings.cgi file.Check if you run itEPSS 2.08%Sep 26, 2025
- Critical9.9In DriveLock 24.1.4 before 24.1.5, 24.2.5 before 24.2.6, and 25.1.2 before 25.1.4, attackers can gain elevated privileges.Check if you run itEPSS 0.46%Sep 26, 2025
- High7.5An issue in Aranda PassRecovery v1.0 allows attackers to enumerate valid user accounts in Active Directory via sending a crafted POST request to /user/existdirectory/1.Check if you run itEPSS 0.40%Sep 26, 2025
- Medium6.1Sourcecodester Employee Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via 'Add Designation.'Check if you run itEPSS 0.20%Sep 26, 2025
- Medium5.3A security vulnerability has been detected in JeecgBoot up to 3.8.2.Check if you run itEPSS 0.42%Sep 25, 2025
- Medium5.3A weakness has been identified in JeecgBoot up to 3.8.2.Check if you run itEPSS 0.41%Sep 25, 2025
- Medium5.3A security flaw has been discovered in JeecgBoot up to 3.8.2.Check if you run itEPSS 0.41%Sep 25, 2025
- Low2.3A vulnerability was identified in JeecgBoot up to 3.8.2.Check if you run itEPSS 0.40%Sep 25, 2025
- Low2.3A vulnerability was determined in JeecgBoot up to 3.8.2.Check if you run itEPSS 0.38%Sep 25, 2025
- Medium5.3A vulnerability was found in GuanxingLu vlarl up to 31abc0baf53ef8f5db666a1c882e1ea64def2997.Check if you run itEPSS 0.39%Sep 25, 2025
- Medium5.3A vulnerability has been found in giantspatula SewKinect up to 7fd963ceb3385af3706af02b8a128a13399dffb1.Check if you run itEPSS 0.39%Sep 25, 2025
- Medium4.9Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability.Check if you run itEPSS 0.30%Sep 25, 2025
- Medium6.9A flaw has been found in JackieDYH Resume-management-system up to fb6b857d852dd796e748ce30c606fe5e61c18273.Check if you run itEPSS 0.40%Sep 25, 2025
- Critical9.3Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: tCheck if you run itEPSS 1.30%Sep 25, 2025
- Medium6.9A memory leak in the headless API for StructuredContents in Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 202Check if you run itEPSS 0.34%Sep 25, 2025
- Medium6.9A vulnerability was detected in MuFen-mker PHP-Usermm up to 37f2d24e51b04346dfc565b93fc2fc6b37bdaea9.Check if you run itEPSS 0.40%Sep 25, 2025
Sort