Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulCheck if you run itEPSS 0.40%Apr 22, 2025
- High7.3TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 was found to contain a buffer overflow vulnCheck if you run itEPSS 0.40%Apr 22, 2025
- High7.3TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulCheck if you run itEPSS 0.40%Apr 22, 2025
- Critical9.8TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the cstecgi.cgiCheck if you run itEPSS 0.56%Apr 22, 2025
- Medium6.1Laravel Starter 11.11.0 is vulnerable to Cross Site Scripting (XSS) in the tags feature.Check if you run itEPSS 0.31%Apr 22, 2025
- Critical9.3ALAS-2025-1980 (important): pppCheck if you run itEPSS 0.24%Apr 22, 2025
- Medium5.4A stored cross-site scripting (XSS) vulnerability in the New Goal Creation section of Volmarg Personal Management System v1.4.65 allows authenticated attackers to execute arbitraryCheck if you run itEPSS 0.23%Apr 22, 2025
- Medium5.4A stored cross-site scripting (XSS) vulnerability in the Image Upload section of Volmarg Personal Management System v1.4.65 allows authenticated attackers to execute arbitrary webCheck if you run itEPSS 0.23%Apr 22, 2025
- High7.3NEXTU FLETA AX1500 WIFI6 Router v1.0.3 was discovered to contain a stack overflow via the url parameter at /boafrm/formFilter.Check if you run itEPSS 0.47%Apr 22, 2025
- Critical9.8An issue in forkosh Mime Tex before v.1.77 allows an attacker to execute arbitrary code via a crafted scriptCheck if you run itEPSS 0.77%Apr 22, 2025
- High7.3A directory traversal vulnerability in forkosh Mime TeX before version 1.77 allows attackers on Windows systems to read or append arbitrary files by manipulating crafted input pathCheck if you run itEPSS 0.64%Apr 22, 2025
- High7.7An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request.Check if you run itEPSS 0.85%Apr 22, 2025
- Critical9.8Sacco Management system v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /sacco/ajax.php.Check if you run itEPSS 0.55%Apr 22, 2025
- Medium6.1A stored cross-site scripting (XSS) vulnerability fin Student Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into tCheck if you run itEPSS 0.30%Apr 22, 2025
- Critical9.8An issue in Student Study Center Desk Management System v1.0 allows attackers to bypass authentication via a crafted GET request to /php-sscdms/admin/login.php.Check if you run itEPSS 0.68%Apr 22, 2025
- Critical9.8An arbitrary file upload vulnerability in the component /jquery-file-upload/server/php/index.php of Hospital Management System v4.0 allows an unauthenticated attacker to upload anyCheck if you run itEPSS 1.24%Apr 22, 2025
- Medium6.1A cross-site scripting (XSS) vulnerability in Hoteldruid v3.0.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the commento1_1 parameCheck if you run itEPSS 0.35%Apr 22, 2025
- UnknownSAP NetWeaver Deserialization of Untrusted DataPatch nowKEVEPSS 5.37%Apr 22, 2025
- Medium5.3A vulnerability classified as problematic was found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0.Check if you run itEPSS 0.38%Apr 21, 2025
- Low3.8IBM Maximo Asset Management 7.6.1.3 is vulnerable to server-side request forgery (SSRF).Check if you run itEPSS 0.22%Apr 21, 2025
- Medium6.9A vulnerability classified as critical has been found in markparticle WebServer up to 1.0.Check if you run itEPSS 0.51%Apr 21, 2025
- Medium6.9A vulnerability was found in markparticle WebServer up to 1.0.Check if you run itEPSS 0.51%Apr 21, 2025
- Medium6.9A vulnerability was found in markparticle WebServer up to 1.0.Check if you run itEPSS 0.70%Apr 21, 2025
- Medium5.3A vulnerability was found in panhainan DS-Java 1.0.Check if you run itEPSS 0.33%Apr 21, 2025
- Medium6.0Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners.Check if you run itEPSS 0.23%Apr 21, 2025
Sort