Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A vulnerability was found in CodeCanyon RISE Ultimate Project Manager 3.8.2 and classified as problematic.Check if you run itEPSS 0.49%Apr 22, 2025
- High8.6A vulnerability, which was classified as critical, was found in H3C GR-3000AX up to V100R006.Check if you run itEPSS 0.52%Apr 22, 2025
- Medium6.3A vulnerability, which was classified as problematic, has been found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0.Check if you run itEPSS 0.61%Apr 22, 2025
- Medium6.1A cross-site scripting (reflected XSS) vulnerability was found in Mettler Toledo FreeWeight.Net Web Reports Viewer 8.4.0 (440).Check if you run itEPSS 0.24%Apr 22, 2025
- Critical9.8LabVantage before LV 8.8.0.13 HF6 allows local file inclusion.Check if you run itEPSS 0.47%Apr 22, 2025
- High7.8DPMAdirektPro 4.1.5 is vulnerable to DLL Hijacking.Check if you run itEPSS 0.18%Apr 22, 2025
- Critical9.8MuM (aka Mensch und Maschine) MapEdit (aka mapedit-web) 24.2.3 is vulnerable to SQL Injection that allows an attacker to execute malicious SQL statements that control a web applicaCheck if you run itEPSS 0.43%Apr 22, 2025
- High7.3Codemers KLIMS 1.6.DEV allows Python code injection.Check if you run itEPSS 0.31%Apr 22, 2025
- High7.3Codemers KLIMS 1.6.DEV lacks a proper access control mechanism, allowing a normal KLIMS user to perform all the actions that an admin can perform, such as modifying the configuratiCheck if you run itEPSS 0.34%Apr 22, 2025
- Critical9.8TCPWave DDI 11.34P1C2 allows Remote Code Execution via Unrestricted File Upload (combined with Path Traversal).Check if you run itEPSS 1.01%Apr 22, 2025
- Critical10.0SAP NetWeaver Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 99.49%Apr 22, 2025
- Medium6.5D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in /goform/delRouting.Check if you run itEPSS 1.02%Apr 22, 2025
- High7.3Francois Jacquet RosarioSIS v12.0.0 was discovered to contain a content spoofing vulnerability in the Theme configuration under the My Preferences module.Check if you run itEPSS 0.29%Apr 22, 2025
- High7.0In Rollback Rx Professional 12.8.0.0, the driver file shieldm.sys allows local users to cause a denial of service because of a null pointer dereference from IOCtl 0x96202000.Check if you run itEPSS 0.36%Apr 22, 2025
- High7.5An issue in UPF in Open5GS UPF versions up to v2.7.2 results an assertion failure vulnerability in PFCP session parameter validation.Check if you run itEPSS 0.79%Apr 22, 2025
- Critical9.8TOTOLINK EX1200T V4.1.2cu.5232_B20210713 was found to contain a pre-auth remote command execution vulnerability in the setUpgradeFW function through the FileName parameter.Check if you run itEPSS 1.23%Apr 22, 2025
- Critical9.8TOTOLINK EX1200T V4.1.2cu.5232_B20210713 was found to contain a pre-auth remote command execution vulnerability in the setWebWlanIdx function through the webWlanIdx parameter.Check if you run itEPSS 1.23%Apr 22, 2025
- Critical9.8TOTOLINK A810R V4.1.2cu.5182_B20201026 and A950RG V4.1.2cu.5161_B20200903 were found to contain a pre-auth remote command execution vulnerability in the setDiagnosisCfg function thCheck if you run itEPSS 1.23%Apr 22, 2025
- Critical9.8TOTOLINK a950rg_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.36%Apr 22, 2025
- Critical9.8TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.Check if you run itEPSS 1.36%Apr 22, 2025
- Critical9.8TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.Check if you run itEPSS 1.36%Apr 22, 2025
- High7.3TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.Check if you run itEPSS 0.40%Apr 22, 2025
- High7.3TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.Check if you run itEPSS 0.34%Apr 22, 2025
- Medium6.5TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a hardcoded password for the telnet service in product.ini.Check if you run itEPSS 0.30%Apr 22, 2025
- High8.8TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a stack overflow via the startTime and endTime parameters in setParentalRules function.Check if you run itEPSS 0.47%Apr 22, 2025
Sort