Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5TOTOLINK A800R V4.1.2cu.5032_B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERY_STRING parameter.Check if you run itEPSS 1.18%Apr 23, 2025
- Medium4.3NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 allows users who lack the InET role to access the InET module via direct requests to known endpoiCheck if you run itEPSS 0.38%Apr 23, 2025
- High7.5NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 generates predictable tokens (that depend on username, time, and the fixed 7Dl9#dj- string) and tCheck if you run itEPSS 0.72%Apr 23, 2025
- UnknownWpmet gutenkit Missing AuthorizationPatch nowKEVEPSS 10.45%Apr 23, 2025
- Low2.5In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terCheck if you run itEPSS 0.18%Apr 23, 2025
- Unknownicegram email_subscribers_\&_newsletters Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 10.16%Apr 23, 2025
- UnknownCisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Uncontrolled Resource ConsumptionPatch nowKEVEPSS 1.85%Apr 23, 2025
- Medium6.8A security vulnerability has been identified in HPE Cray Data Virtualization Service (DVS).Check if you run itEPSS 0.16%Apr 22, 2025
- Medium5.5A vulnerability in the kernel of the Cray Operating System (COS) could allow an attacker to perform a local Denial of Service (DoS) attack.Check if you run itEPSS 0.19%Apr 22, 2025
- Critical9.3xrpl.js is a JavaScript/TypeScript API for interacting with the XRP Ledger in Node.js and the browser.Check if you run itEPSS 0.92%Apr 22, 2025
- Low2.5NVIDIA NvContainer service for Windows contains a vulnerability in its usage of OpenSSL, where an attacker could exploit a hard-coded constant issue by copying a malicious DLL in aCheck if you run itEPSS 0.17%Apr 22, 2025
- Medium4.6SAP Learning Solution is vulnerable to Cross-Site Request Forgery (CSRF), allowing an attacker to trick authenticated user into sending unintended requests to the server.Check if you run itEPSS 0.14%Apr 22, 2025
- Medium4.3SAP Field Logistics Manage Logistics application OData meta-data property is vulnerable to data tampering, due to which certain fields could be externally modified by an attacker cCheck if you run itEPSS 0.28%Apr 22, 2025
- Medium6.4The Cuba JPA web API enables loading and saving any entities defined in the application data model by sending simple HTTP requests.Check if you run itEPSS 0.33%Apr 22, 2025
- Medium6.4The CUBA REST API add-on performs operations on data and entities.Check if you run itEPSS 0.33%Apr 22, 2025
- Medium6.5CUBA Platform is a high level framework for enterprise applications development.Check if you run itEPSS 0.54%Apr 22, 2025
- Medium4.6ManageWiki is a MediaWiki extension allowing users to manage wikis.Check if you run itEPSS 0.22%Apr 22, 2025
- Medium6.9MinIO Operator STS is a native IAM Authentication for Kubernetes.Check if you run itEPSS 0.63%Apr 22, 2025
- Medium4.3OctoPrint provides a web interface for controlling consumer 3D printers.Check if you run itEPSS 0.25%Apr 22, 2025
- Medium4.1IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to server-side request forgery (SSRF).Check if you run itEPSS 0.35%Apr 22, 2025
- High7.6NVIDIA NeMo Framework contains a vulnerability where a user could cause an improper control of generation of code by remote code execution.Check if you run itEPSS 0.70%Apr 22, 2025
- High7.6NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory by an arbitrary file write.Check if you run itEPSS 0.64%Apr 22, 2025
- High7.6NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution.Check if you run itEPSS 0.69%Apr 22, 2025
- High7.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon BAM (Boolean KPi Listing modules) allows SQL Injection.Check if you run itEPSS 0.41%Apr 22, 2025
- High8.4IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands as a privileged user due to execution of commands with unCheck if you run itEPSS 0.22%Apr 22, 2025
Sort