Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows StoCheck if you run itEPSS 0.27%Apr 15, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Global Gallery allows Reflected XSS.Check if you run itEPSS 0.29%Apr 15, 2025
- Medium6.9Unauthenticated attackers can query information about total energy consumed by EV chargers of arbitrary users.Check if you run itEPSS 0.31%Apr 15, 2025
- Medium6.9Unauthenticated attackers can trigger device actions associated with specific "scenes" of arbitrary users.Check if you run itEPSS 0.55%Apr 15, 2025
- Medium6.9Unauthenticated attackers can send configuration settings to device and possible perform physical actions remotely (e.g., on/off).Check if you run itEPSS 0.65%Apr 15, 2025
- Medium6.9An unauthenticated attackers can obtain a list of smart devices by knowing a valid username through an unprotected API.Check if you run itEPSS 0.31%Apr 15, 2025
- Critical9.3Due to lack of server-side input validation, attackers can inject malicious JavaScript code into users personal spaces of the web portal.Check if you run itEPSS 0.51%Apr 15, 2025
- Critical9.3An attacker can upload an arbitrary file instead of a plant image.Check if you run itEPSS 0.26%Apr 15, 2025
- Medium6.9An attacker can export other users' plant information.Check if you run itEPSS 0.37%Apr 15, 2025
- Medium6.9An unauthenticated attacker can hijack other users' devices and potentially control them.Check if you run itEPSS 0.32%Apr 15, 2025
- Medium6.9An unauthenticated attacker can delete any user's "rooms" by knowing the user's and room IDs.Check if you run itEPSS 0.30%Apr 15, 2025
- Medium6.9An unauthenticated attacker can obtain EV charger version and firmware upgrading history by knowing the charger ID.Check if you run itEPSS 0.31%Apr 15, 2025
- Medium6.9An unauthenticated attacker can obtain EV charger energy consumption information of other users.Check if you run itEPSS 0.31%Apr 15, 2025
- Medium6.9An unauthenticated attacker can obtain other users' charger information.Check if you run itEPSS 0.59%Apr 15, 2025
- Medium6.9Unauthenticated attackers can rename arbitrary devices of arbitrary users (i.e., EV chargers).Check if you run itEPSS 0.32%Apr 15, 2025
- Medium6.9Unauthenticated attackers can query an API endpoint and get device details.Check if you run itEPSS 0.59%Apr 15, 2025
- Medium6.9An attacker can get information about the groups of the smart home devices for arbitrary users (i.e., "rooms").Check if you run itEPSS 0.30%Apr 15, 2025
- Medium6.9Unauthenticated attackers can obtain restricted information about a user's smart device collections (i.e., "scenes").Check if you run itEPSS 0.50%Apr 15, 2025
- Medium6.9Unauthenticated attackers can obtain restricted information about a user's smart device collections (i.e., "rooms").Check if you run itEPSS 0.50%Apr 15, 2025
- Medium6.9An attacker can change registered email addresses of other users and take over arbitrary accounts.Check if you run itEPSS 0.85%Apr 15, 2025
- High7.8A maliciously crafted RCS file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability.Check if you run itEPSS 0.23%Apr 15, 2025
- High7.8A maliciously crafted PDF file, when parsed through Autodesk applications, can force a Memory Corruption vulnerability.Check if you run itEPSS 0.27%Apr 15, 2025
- Medium6.9An unauthenticated attacker can obtain a serial number of a smart meter(s) using its owner's username.Check if you run itEPSS 0.50%Apr 15, 2025
- High7.8A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vulnerability.Check if you run itEPSS 0.27%Apr 15, 2025
- High7.8A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vulnerability.Check if you run itEPSS 0.21%Apr 15, 2025
Sort