Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5IBM Concert Software 1.0.0 through 1.0.5 could allow an authenticated user to cause a denial of service due to the expansion of archive files without controlling resource consumptiCheck if you run itEPSS 0.39%May 2, 2025
- Medium6.9A vulnerability was found in itsourcecode Restaurant Management System 1.0.Check if you run itEPSS 0.60%May 2, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in Wangshen SecGate 3600 2024.Check if you run itEPSS 0.46%May 2, 2025
- Medium5.0Grokability Snipe-IT before 8.1.0 has incorrect authorization for accessing asset information.Check if you run itEPSS 1.30%May 2, 2025
- Medium4.4In Intrexx Portal Server before 12.0.4, multiple Velocity-Scripts are susceptible to the execution of unrequested JavaScript code in HTML, aka XSS.Check if you run itEPSS 0.24%May 2, 2025
- Critical9.8TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a command execution vulnerability in the setDeviceName interface of the /lib/cste_modules/global.so library, specifically in the prCheck if you run itEPSS 0.95%May 2, 2025
- Critical9.8Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formSetSambaConf function via the usbname parameter.Check if you run itEPSS 1.91%May 2, 2025
- Critical9.8Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName parameter.Check if you run itEPSS 1.91%May 2, 2025
- Critical9.8Wavlink WL-WN530H4 20220801 was found to contain a command injection vulnerability in the ping_test function of the adm.cgi via the pingIp parameter.Check if you run itEPSS 2.66%May 2, 2025
- Unknowncasbin casdoor Improper AuthorizationPatch nowKEVEPSS 1.82%May 2, 2025
- Medium6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.24%May 2, 2025
- Low2.9In the obfstr crate before 0.4.4 for Rust, the obfstr! argument type is not restricted to string slices, leading to invalid UTF-8 conversion that produces an invalid value.Check if you run itEPSS 0.17%May 2, 2025
- Medium5.3ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamf_read_header in /libavformat/iamfdec.c.Check if you run itEPSS 0.30%May 2, 2025
- UnknownZKTeco BioTime Files or Directories Accessible to External PartiesPatch nowKEVEPSS 2.66%May 2, 2025
- UnknownZKTeco BioTime Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.26%May 2, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in Wangshen SecGate 3600 2024.Check this weekEPSS 13.28%May 1, 2025
- Medium6.9A vulnerability classified as critical was found in PCMan FTP Server 2.0.7.Check if you run itEPSS 0.75%May 1, 2025
- Medium6.9A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7.Check if you run itEPSS 0.75%May 1, 2025
- Medium6.9A vulnerability was found in PCMan FTP Server 2.0.7.Check if you run itEPSS 0.75%May 1, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows 12.1.0 and 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.Check if you run itEPSS 0.36%May 1, 2025
- Medium6.0IBM MQ Container when used with the IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SCheck if you run itEPSS 0.28%May 1, 2025
- Medium6.5IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 through 3.2.10 Client conneCheck if you run itEPSS 0.39%May 1, 2025
- High8.5An insecure file system permissions vulnerability in MSP360 Backup 4.3.1.115 allows a low privileged user to execute commands with root privileges in the 'Online Backup' folder.Check if you run itEPSS 0.44%May 1, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in AlanBinu007 Spring-Boot-Advanced-Projects up to 3.1.3.Check if you run itEPSS 0.57%May 1, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in PHPGurukul COVID19 Testing Management System 1.0.Check if you run itEPSS 0.64%May 1, 2025
Sort