Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the function 0x41dda8Check if you run itEPSS 1.28%Apr 17, 2025
- Medium6.1Code Astro Internet Banking System 2.0.0 is vulnerable to Cross Site Scripting (XSS) via the name parameter in /admin/pages_account.php.Check if you run itEPSS 0.30%Apr 17, 2025
- Medium6.5An arbitrary file deletion vulnerability in the /post/{postTitle} component of flaskBlog v2.6.1 allows attackers to delete article titles created by other users via supplying a craCheck if you run itEPSS 0.22%Apr 17, 2025
- Critical9.8A SQL Injection vulnerability exists in the parameter of the progress-body-weight.php endpoint of Dietiqa App v1.0.20.Check if you run itEPSS 0.52%Apr 17, 2025
- Low3.3DragonflyDB Dragonfly through 1.28.2 (fixed in 1.29.0) allows authenticated users to cause a denial of service (daemon crash) via a Lua library command that references a large negaCheck if you run itEPSS 0.29%Apr 17, 2025
- Low3.3DragonflyDB Dragonfly before 1.27.0 allows authenticated users to cause a denial of service (daemon crash) via a crafted Redis command.Check if you run itEPSS 0.41%Apr 17, 2025
- High7.5Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via cloneType2.Check if you run itEPSS 0.69%Apr 17, 2025
- High7.5Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via wanMTU2.Check if you run itEPSS 0.58%Apr 17, 2025
- High7.5Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via wanSpeed2.Check if you run itEPSS 0.58%Apr 17, 2025
- Unknownglpi-project GLPI Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 86.69%Apr 17, 2025
- High8.6Broadcom Brocade Fabric OS Code Injection VulnerabilityPatch nowKEVEPSS 0.69%Apr 17, 2025
- Critical9.8Hazelcast Management Center through 6.0 allows remote code execution via a JndiLoginModule user.provider.url in a hazelcast-client XML document (aka a client configuration file), wCheck if you run itEPSS 1.02%Apr 17, 2025
- High7.1OpenMetadata <=1.4.1 is vulnerable to SQL Injection.Check if you run itEPSS 0.62%Apr 17, 2025
- High8.4An issue in Think Router Tk-Rt-Wr135G V3.0.2-X000 allows attackers to bypass authentication via a crafted cookie.Check if you run itEPSS 0.28%Apr 17, 2025
- Critical9.8Pycel through 1.0b30, when operating on an untrusted spreadsheet, allows code execution via a crafted formula in a cell, such as one beginning with the =IF(A1=200, eval("__import__Check if you run itEPSS 0.99%Apr 17, 2025
- Medium5.4Pydio Core <= 8.2.5 is vulnerable to Cross Site Scripting (XSS) via the New URL Bookmark feature.Check if you run itEPSS 0.28%Apr 17, 2025
- High8.8Out-of-Bounds Read in netfilter/ipset in Linux Kernel ChromeOS [6.1, 5.15, 5.10, 5.4, 4.19] allows a local attacker with low privileges to trigger an out-of-bounds read, potentiallCheck if you run itEPSS 0.22%Apr 16, 2025
- Medium6.5ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices and intercept deviceCheck if you run itEPSS 0.20%Apr 16, 2025
- High8.8Access Control Vulnerability in Gerrit chromiumos project configuration in Google ChromeOS 16063.87.0 allows an attacker with a registered Gerrit account to inject malicious code iCheck if you run itEPSS 0.41%Apr 16, 2025
- High7.5DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose plaintext DNS queries via failure to properly tunnel DNS trafCheck if you run itEPSS 0.20%Apr 16, 2025
- Medium6.8Overview The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' (doubled triple dot sCheck if you run itEPSS 0.44%Apr 16, 2025
- Medium4.9Overview XML documents optionally contain a Document Type Definition (DTD), which, among other features, enables the definition of XML entities.Check if you run itEPSS 0.45%Apr 16, 2025
- Medium4.9Overview XML documents optionally contain a Document Type Definition (DTD), which, among other features, enables the definition of XML entities.Check if you run itEPSS 0.43%Apr 16, 2025
- Medium4.4Overview The software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users.Check if you run itEPSS 0.30%Apr 16, 2025
- Medium6.8Overview The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' (doubled triple dot sCheck if you run itEPSS 0.50%Apr 16, 2025
Sort