Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3A discrepancy in the error message returned by the login function of Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 when entering the wCheck if you run itEPSS 0.27%Aug 22, 2025
- Medium6.5Insecure permissions in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 allow attackers to arbitrarily change other users' passwords viaCheck if you run itEPSS 0.21%Aug 22, 2025
- Medium5.3Insufficient privilege verification in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 allows authenticated attackers to create accountsCheck if you run itEPSS 0.24%Aug 22, 2025
- Medium5.3An Insecure Direct Object Reference (IDOR) vulnerability in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 allows unauthorized attackerCheck if you run itEPSS 0.24%Aug 22, 2025
- Medium6.3An open redirect vulnerability in Reolink v4.54.0.4.20250526 allows attackers to redirect users to a malicious site via a crafted URL.Check if you run itEPSS 0.23%Aug 22, 2025
- Medium5.3An intent redirection vulnerability in Reolink v4.54.0.4.20250526 allows unauthorized attackers to access internal functions or access non-public components.Check if you run itEPSS 0.33%Aug 22, 2025
- Medium5.4An issue in the lock screen component of Reolink v4.54.0.4.20250526 allows attackers to bypass authentication via using an ADB (Android Debug Bridge).Check if you run itEPSS 0.31%Aug 22, 2025
- Medium6.5Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity settings.Check if you run itEPSS 0.34%Aug 22, 2025
- Medium6.5An Insecure Direct Object Reference (IDOR) vulnerability in Reolink v4.54.0.4.20250526 allows unauthorized attackers to access and download other users' profile photos via a crafteCheck if you run itEPSS 0.24%Aug 22, 2025
- Medium6.1A cross-site scripting (XSS) vulnerability in the valuateJavascript() function of Reolink v4.54.0.4.20250526 allows attackers to execute arbitrary web scripts or HTML via a craftedCheck if you run itEPSS 0.23%Aug 22, 2025
- Critical9.8Tenda O3V2 1.0.0.12(3880) is vulnerable to Buffer Overflow in the fromSafeSetMacFilter function via the mac parameter.Check if you run itEPSS 0.56%Aug 22, 2025
- High7.3D-Link DCS-825L firmware version 1.08.01 and possibly prior versions contain an insecure implementation in the mydlink-watch-dog.sh script.Check if you run itEPSS 0.19%Aug 22, 2025
- High8.8QuantumNous new-api v.0.8.5.2 is vulnerable to Cross Site Scripting (XSS).Check if you run itEPSS 0.42%Aug 22, 2025
- Low3.5DooTask v1.0.51 was dicovered to contain an authenticated arbitrary download vulnerability via the component /msg/sendtext.Check if you run itEPSS 0.28%Aug 22, 2025
- High8.8OperaMasks SDK ELite Script Engine v0.5.0 was discovered to contain a deserialization vulnerability.Check if you run itEPSS 0.54%Aug 22, 2025
- Medium6.5JeecgBoot versions from 3.4.3 up to 3.8.0 were found to contain a SQL injection vulnerability in the /jeecg-boot/online/cgreport/head/parseSql endpoint, which allows bypassing SQLCheck if you run itEPSS 0.24%Aug 22, 2025
- High8.1An issue was discovered in Shopizer 3.2.7.Check if you run itEPSS 0.22%Aug 22, 2025
- Medium5.3MCSManager 10.5.3 daemon process runs as a root account by default, and its sensitive data (including tokens and terminal content) is stored in the data directory, readable by allCheck if you run itEPSS 0.25%Aug 22, 2025
- High7.8An issue was discovered in the changePassword method in file /usr/share/php/openmediavault/system/user.inc in OpenMediaVault 7.4.17 allowing local authenticated attackers to escalaCheck if you run itEPSS 0.19%Aug 22, 2025
- Critical9.8spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in READ_STRING_SYSCALL.Check if you run itEPSS 0.50%Aug 22, 2025
- High7.8In MindManager Windows versions prior to 24.1.150, attackers could potentially write to unexpected directories in victims' machines via directory traversal if victims opened file aCheck if you run itEPSS 0.38%Aug 22, 2025
- Critical9.8Incorrect access control in the doFilter function of my-site v1.0.2.RELEASE allows attackers to access sensitive components without authentication.Check if you run itEPSS 0.58%Aug 22, 2025
- Critical9.8An authentication bypass vulnerability in anji-plus AJ-Report up to v1.4.2 allows unauthenticated attackers to execute arbitrary code via a crafted URL.Check if you run itEPSS 0.80%Aug 22, 2025
- Critical9.8MallChat v1.0-SNAPSHOT has an authentication bypass vulnerability.Check if you run itEPSS 0.68%Aug 22, 2025
- Medium6.5Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 allows unsafe font upload for skins.Check if you run itEPSS 0.34%Aug 22, 2025
Sort