Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4A vulnerability was found in mod_proxy_cluster.Check if you run itEPSS 0.38%Apr 23, 2025
- Medium6.4The UiCore Elements – Free Elementor widgets and templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the UI Counter, UI Icon Box, UI Testimonial Slider,Check if you run itEPSS 0.25%Apr 23, 2025
- Medium5.3An unauthenticated remote attacker can bypass the user management in CODESYS Visualization and read visualization template files or static elements by means of forced browsing.Check if you run itEPSS 0.46%Apr 23, 2025
- High7.5The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to product price manipulation in all versions up to, and including, 5.1.2.Check if you run itEPSS 0.54%Apr 23, 2025
- High8.2The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.1.2 via the 'file_url' parameter.Check if you run itEPSS 0.41%Apr 23, 2025
- Medium6.5A malicious third party could invoke a persistent denial of service vulnerability in FireEye EDR agent by sending a specially-crafted tamper protection event to the HX service to tCheck if you run itEPSS 0.69%Apr 23, 2025
- Medium5.9Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for a non-admin user to remove system files causing a boot loop by redirecting a filCheck if you run itEPSS 0.23%Apr 23, 2025
- Medium6.1Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has identified an issue with a specific file that the server is using.Check if you run itEPSS 0.24%Apr 23, 2025
- High7.5Missing authorization vulnerability in synocopy in Synology DiskStation Manager (DSM) before 7.1.1-42962-8, 7.2.1-69057-7 and 7.2.2-72806-3 allows remote attackers to read arbitrarCheck if you run itEPSS 0.53%Apr 23, 2025
- Low3.2In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.Check if you run itEPSS 0.18%Apr 23, 2025
- Low2.9In multispectral MIFF image processing in ImageMagick before 7.1.1-44, packet_size is mishandled (related to the rendering of all channels in an arbitrary order).Check if you run itEPSS 0.42%Apr 23, 2025
- Critical9.8In the Tenda ac9 v1.0 router with firmware V15.03.05.14_multi, there is a stack overflow vulnerability in /goform/WifiWpsStart, which may lead to remote arbitrary code execution.Check if you run itEPSS 1.09%Apr 23, 2025
- Critical9.8In Tenda ac9 v1.0 with firmware V15.03.05.14_multi, the rebootTime parameter of /goform/SetSysAutoRebbotCfg has a stack overflow vulnerability, which can lead to remote arbitrary cCheck if you run itEPSS 0.93%Apr 23, 2025
- Critical9.8In Tenda AC9 v1.0 with firmware V15.03.05.14_multi, the security parameter of /goform/WifiBasicSet has a stack overflow vulnerability, which can lead to remote arbitrary code execuCheck if you run itEPSS 0.93%Apr 23, 2025
- Low2.9In MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used.Check if you run itEPSS 0.59%Apr 23, 2025
- Medium5.8A directory traversal vulnerability exists in Ivanti LANDesk Management Gateway through 4.2-1.9.Check if you run itEPSS 1.47%Apr 23, 2025
- Medium6.1A Cross-Site Scripting (XSS) vulnerability in the search function of Q4 Inc Investor Relations Platform v5.147.1.2 allows attackers to execute arbitrary Javascript via injecting aCheck if you run itEPSS 0.24%Apr 23, 2025
- High8.1BYD QIN PLUS DM-i Dilink OS v3.0_13.1.7.2204050.1 to v3.0_13.1.7.2312290.1_0 was discovered to cend broadcasts to the manufacturer's cloud server unencrypted, allowing attackers toCheck if you run itEPSS 0.35%Apr 23, 2025
- High7.3TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulCheck if you run itEPSS 0.40%Apr 23, 2025
- High7.3TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulCheck if you run itEPSS 0.40%Apr 23, 2025
- High7.3TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter.Check if you run itEPSS 0.40%Apr 23, 2025
- High7.3TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the downloadFile.cgi through the v14 and v3 parametersCheck if you run itEPSS 0.40%Apr 23, 2025
- High7.3TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter.Check if you run itEPSS 0.40%Apr 23, 2025
- High7.3TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi componentCheck if you run itEPSS 0.49%Apr 23, 2025
- High7.3TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter.Check if you run itEPSS 0.43%Apr 23, 2025
Sort