Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.Check if you run itEPSS 0.25%Apr 23, 2025
- Medium5.5A flaw was found in fig2dev.Check if you run itEPSS 0.25%Apr 23, 2025
- Medium5.5In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via read_objects function.Check if you run itEPSS 0.27%Apr 23, 2025
- High7.8A flaw was found in xfig.Check if you run itEPSS 0.30%Apr 23, 2025
- High7.5SonicWall SonicOS NULL Pointer DereferencePatch nowKEVEPSS 0.84%Apr 23, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Drupal Search API Solr allows Cross Site Request Forgery.This issue affects Search API Solr: from 0.0.0 before 4.3.9.Check if you run itEPSS 0.15%Apr 23, 2025
- High7.3Vulnerability in Drupal Sportsleague.This issue affects Sportsleague: *.*.Check if you run itEPSS 0.30%Apr 23, 2025
- High7.3Vulnerability in Drupal UEditor - 百度编辑器.This issue affects UEditor - 百度编辑器: *.*.Check if you run itEPSS 0.40%Apr 23, 2025
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Block Class allows Cross-Site Scripting (XSS).This issue affects BlockCheck if you run itEPSS 0.25%Apr 23, 2025
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Bootstrap Site Alert allows Cross-Site Scripting (XSS).This issue affecCheck if you run itEPSS 0.25%Apr 23, 2025
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Colorbox allows Cross-Site Scripting (XSS).This issue affects Colorbox:Check if you run itEPSS 0.26%Apr 23, 2025
- High7.2BEC Technologies Multiple Routers sys ping Command Injection Remote Code Execution Vulnerability.Check if you run itEPSS 2.14%Apr 23, 2025
- Medium5.3BEC Technologies Multiple Routers Insufficiently Protected Credentials Information Disclosure Vulnerability.Check if you run itEPSS 0.45%Apr 23, 2025
- Medium5.3BEC Technologies Multiple Routers Authentication Bypass Vulnerability.Check if you run itEPSS 0.92%Apr 23, 2025
- Medium4.9BEC Technologies Multiple Routers Cleartext Password Storage Information Disclosure Vulnerability.Check if you run itEPSS 0.50%Apr 23, 2025
- High7.8Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.22%Apr 23, 2025
- High7.8Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.22%Apr 23, 2025
- High8.8Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability.Check if you run itEPSS 0.65%Apr 23, 2025
- High7.6CarlinKit CPC200-CCPA Wireless Hotspot Hard-Coded Credentials Authentication Bypass Vulnerability.Check if you run itEPSS 0.41%Apr 23, 2025
- High8.0CarlinKit CPC200-CCPA update.cgi Improper Verification of Cryptographic Signature Code Execution Vulnerability.Check if you run itEPSS 0.25%Apr 23, 2025
- Medium6.8CarlinKit CPC200-CCPA Improper Verification of Cryptographic Signature Code Execution Vulnerability.Check if you run itEPSS 0.21%Apr 23, 2025
- High7.8CarlinKit CPC200-CCPA Missing Root of Trust Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.19%Apr 23, 2025
- High7.8GIMP FLI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.Check if you run itEPSS 4.17%Apr 23, 2025
- High7.8GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability.Check this weekEPSS 17.19%Apr 23, 2025
- High7.1PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability.Check if you run itEPSS 0.64%Apr 23, 2025
Sort