Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5An issue was discovered in AXIS BANK LIMITED Axis Mobile App 9.9 that allows attackers to obtain sensitive information without a UPI PIN, such as account information, balances, traCheck if you run itEPSS 0.30%Sep 12, 2025
- Medium6.3Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interfaceCheck if you run itEPSS 0.19%Sep 12, 2025
- Medium6.1PHPGURUKUL Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) due to lack of input sanitization in the quantity parameter when adding a product to the cart.Check if you run itEPSS 0.23%Sep 12, 2025
- High7.0A stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.Check if you run itEPSS 0.27%Sep 12, 2025
- High7.5An issue in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to arbitrarily overwrite files via supplying a crafted PUT request.Check if you run itEPSS 0.32%Sep 12, 2025
- Medium5.4Multiple stored cross-site scripting (XSS) vulnerabilities in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to execute arbitrary web scripts or HTML via injecting aCheck if you run itEPSS 0.21%Sep 12, 2025
- High7.5Incorrect access control in the web service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to download car information without authentication.Check if you run itEPSS 0.42%Sep 12, 2025
- Critical9.1Incorrect access control in the FTP protocol of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to authenticate into the service using any combination of username andCheck if you run itEPSS 0.36%Sep 12, 2025
- Critical9.8Samsung Mobile Devices Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 2.22%Sep 12, 2025
- Critical9.8OpenSynergy BlueSDK (aka Blue SDK) through 6.x has a Use-After-Free.Check if you run itEPSS 7.31%Sep 12, 2025
- Medium6.5OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Incorrect Control Flow Scoping.Check if you run itEPSS 0.56%Sep 12, 2025
- High7.5OpenSynergy BlueSDK (aka Blue SDK) through 6.x mishandles a function call.Check if you run itEPSS 0.74%Sep 12, 2025
- Medium5.3OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Improper Input Validation.Check if you run itEPSS 5.63%Sep 12, 2025
- Medium5.1A vulnerability was identified in erjinzhi 10OA 1.0.Check if you run itEPSS 0.73%Sep 11, 2025
- Medium5.3A vulnerability was determined in erjinzhi 10OA 1.0.Check if you run itEPSS 0.36%Sep 11, 2025
- Medium5.3A vulnerability was found in erjinzhi 10OA 1.0.Check if you run itEPSS 0.36%Sep 11, 2025
- High8.7IBM Fusion 2.2.0 through 2.10.1, IBM Fusion HCI 2.2.0 through 2.10.0, and IBM Fusion HCI for watsonx 2.8.2 through 2.10.0 uses insecure default configurations that could expose AMQCheck if you run itEPSS 0.39%Sep 11, 2025
- High8.8Daikin Europe N.V Security Gateway is vulnerable to an authorization bypass through a user-controlled key vulnerability that could allow an attacker to bypass authentication.Check if you run itEPSS 0.65%Sep 11, 2025
- Medium4.7InstantCMS is a free and open source content management system.Check if you run itEPSS 0.45%Sep 11, 2025
- High7.3A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 drivers used by some Lenovo consumer notebooks that could allow aCheck if you run itEPSS 0.43%Sep 11, 2025
- High8.7An internal product security audit of Lenovo XClarity Orchestrator (LXCO) discovered the below vulnerability: An attacker with access to a device on the local Lenovo XClarity OrcheCheck if you run itEPSS 0.26%Sep 11, 2025
- Medium5.3A missing authentication vulnerability was reported in some Lenovo printers that could allow a user to view limited device information or modify network settings via the CUPS serviCheck if you run itEPSS 0.20%Sep 11, 2025
- High7.5A potential vulnerability was reported in the Lenovo Wallpaper Client that could allow arbitrary code execution under certain conditions.Check if you run itEPSS 0.20%Sep 11, 2025
- High8.5A potential DLL hijacking vulnerability was discovered in Lenovo Browser during an internal security assessment that could allow a local user to execute code with elevated privilegCheck if you run itEPSS 0.17%Sep 11, 2025
- Critical9.7AIRI is a self-hosted, artificial intelligence based Grok Companion.Check if you run itEPSS 0.56%Sep 11, 2025
Sort