Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the setUploadUserData function via the FileName parameter.Check if you run itEPSS 0.94%May 1, 2025
- Medium6.3TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url or magicid parameters.Check if you run itEPSS 0.94%May 1, 2025
- Medium6.3TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the setApRebootScheCfg function via the hour or minute parameters.Check if you run itEPSS 0.94%May 1, 2025
- High7.2A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface, which in specific conditions could potentially enable a remoteCheck if you run itEPSS 0.34%Apr 30, 2025
- Medium5.3: Use of GET Request Method With Sensitive Query Strings vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.This issue affects ANC: through 1.1.4; ANC-L: through 1.1.4; ANC-mini: thCheck if you run itEPSS 0.22%Apr 30, 2025
- High8.6Kyverno is a policy engine designed for cloud native platform engineering teams.Check if you run itEPSS 0.75%Apr 30, 2025
- Medium6.1XWiki xwiki URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 0.58%Apr 30, 2025
- Medium6.5A vulnerability in the “Backup & Restore” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to access secret information via mCheck if you run itEPSS 3.51%Apr 30, 2025
- High8.8A vulnerability in the “Remote Logging” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to execute arbitrary OS commands inCheck if you run itEPSS 0.88%Apr 30, 2025
- High7.1A vulnerability in the “Certificates and Keys” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to write arbitrary certificaCheck if you run itEPSS 0.41%Apr 30, 2025
- High7.1A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to delete the configuration of pCheck if you run itEPSS 0.65%Apr 30, 2025
- Medium5.4A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipulate the wireless netwCheck if you run itEPSS 0.55%Apr 30, 2025
- Medium6.5A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipulate the network confiCheck if you run itEPSS 0.53%Apr 30, 2025
- High7.5A vulnerability in the “Proxy” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to manipulate the “/etc/environment” file viaCheck if you run itEPSS 0.52%Apr 30, 2025
- Medium6.3A vulnerability in the “Hosts” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipulate the “hosts” file in an unintenCheck if you run itEPSS 0.39%Apr 30, 2025
- Medium6.3A vulnerability in the error notification messages of the web application of ctrlX OS allows a remote unauthenticated attacker to inject arbitrary HTML tags and, possibly, executeCheck if you run itEPSS 0.35%Apr 30, 2025
- Medium5.4A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to write arbitrary files in arbitCheck if you run itEPSS 0.56%Apr 30, 2025
- Medium5.3A vulnerability in the login functionality of the web application of ctrlX OS allows a remote unauthenticated attacker to guess valid usernames via multiple crafted HTTP requests.Check if you run itEPSS 0.44%Apr 30, 2025
- Medium6.5A vulnerability in the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to induce a Denial-of-Service (DoS) condition on the device via multipleCheck if you run itEPSS 0.53%Apr 30, 2025
- Medium5.0A vulnerability in the web application of ctrlX OS allows a remote unauthenticated attacker to conduct various attacks against users of the vulnerable system, including web cache pCheck if you run itEPSS 0.27%Apr 30, 2025
- High7.1A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to execute arbitrary client-side cCheck if you run itEPSS 0.41%Apr 30, 2025
- Medium5.3A SQL Injection vulnerability was identified in the admin/edit-directory.php file of the PHPGurukul Directory Management System v2.0.Check if you run itEPSS 0.22%Apr 30, 2025
- High7.2A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0.Check if you run itEPSS 0.56%Apr 30, 2025
- Critical9.8A SQL injection vulnerability was discovered in /add-foreigners-ticket.php file of PHPGurukul Park Ticketing Management System v2.0.Check if you run itEPSS 0.47%Apr 30, 2025
- Critical9.8A SQL injection vulnerability was discovered in edit-ticket.php of PHPGurukul Park Ticketing Management System v2.0.Check if you run itEPSS 0.81%Apr 30, 2025
Sort