Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via mac2.Check if you run itEPSS 0.64%Apr 15, 2025
- Medium4.6Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via serviceName2.Check if you run itEPSS 0.26%Apr 15, 2025
- Medium6.5In JotUrl 2.0, is possible to bypass security requirements during the password change process.Check if you run itEPSS 0.36%Apr 15, 2025
- Medium6.5In JotUrl 2.0, passwords are sent via HTTP GET-type requests, potentially exposing credentials to eavesdropping or insecure records.Check if you run itEPSS 0.32%Apr 15, 2025
- Medium5.6RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formiNICbasicREP function.Check if you run itEPSS 0.36%Apr 15, 2025
- Medium4.6TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the pin parameter in the function setWiFiWpsConfig.Check if you run itEPSS 0.22%Apr 15, 2025
- Critical9.8Totolink N600R v4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the macCloneMac parameter in the setWanConfig function.Check if you run itEPSS 0.56%Apr 15, 2025
- High7.2A command injection vulnerability in the Nmap diagnostic tool in the admin web console of Extron SMP 111 <=3.01, SMP 351 <=2.16, SMP 352 <= 2.16, and SME 211 <= 3.02, allows a remoCheck if you run itEPSS 2.39%Apr 15, 2025
- Medium6.4An issue was discovered in AcpiS3SaveDxe and ChipsetSvcDxe in Insyde InsydeH2O with kernel 5.2 though 5.7.Check if you run itEPSS 0.46%Apr 15, 2025
- Medium5.9An issue in the web socket handshake process of SteVe v3.7.1 allows attackers to bypass authentication and execute arbitrary coammands via supplying crafted OCPP requests.Check if you run itEPSS 0.44%Apr 15, 2025
- High7.3An issue in Oncord+ Android Infotainment Systems OS Android 12, Model Hardware TS17,Hardware part Number F57L_V3.2_20220301, and Build Number PlatformVER:K24-2023/05/09-v0.01 allowCheck if you run itEPSS 0.90%Apr 15, 2025
- Critical9.1A replay attack vulnerability was discovered in a Zigbee smart home kit manufactured by Ksix (Zigbee Gateway Module = v1.0.3, Door Sensor = v1.0.7, Motion Sensor = v1.0.12), whereCheck if you run itEPSS 0.87%Apr 15, 2025
- Medium6.5SQL injection vulnerability found in Enricozab CMS v.1.0 allows a remote attacker to execute arbitrary code via /hdo/hdo-view-case.php.Check if you run itEPSS 0.48%Apr 15, 2025
- Medium6.9An integer overflow can be triggered in SQLite’s function.Check if you run itEPSS 1.25%Apr 14, 2025
- Critical9.3st._joe_erp_system_project st._joe_erp_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.13%Apr 14, 2025
- UnknownInstaWP instawp_connect Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 10.60%Apr 11, 2025
- Medium5.5In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can cause a denial of service (application crash).Check if you run itEPSS 0.22%Apr 10, 2025
- Low3.8In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.Check if you run itEPSS 0.20%Apr 10, 2025
- UnknownSureTriggers suretriggers Incorrect ComparisonPatch nowKEVEPSS 76.24%Apr 9, 2025
- Critical9.8Yiiframework Yii Improper Protection of Alternate Path VulnerabilityPatch nowKEVEPSS 87.76%Apr 9, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mm/migrate: fix shmem xarray update during migration A shmem folio can be either in page cache or i…Check if you run itEPSS 0.21%Apr 8, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state There are several problems with th…Check if you run itEPSS 0.21%Apr 8, 2025
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free VulnerabilityPatch nowKEVEPSS 19.25%Apr 8, 2025
- High7.5In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the end of a malloc-allocated buffer.Check if you run itEPSS 0.52%Apr 7, 2025
- Low3.7A flaw was found in GLib.Check if you run itEPSS 0.65%Apr 7, 2025
Sort