Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9NASA openVSP 3.16.1 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the geomet…Check if you run itEPSS 0.17%May 25, 2026
- High8.6CuteFTP 5.0 XP contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by injecting malicious payload into the Site Manager label field.Check if you run itEPSS 0.18%May 25, 2026
- High8.7PCViewer vt1000 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by submitting relative path sequences in GET requests.Check if you run itEPSS 0.78%May 25, 2026
- High8.8Twitter-Clone 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the n…Check if you run itEPSS 0.34%May 25, 2026
- Medium5.3Twitter-Clone 1 contains a cross-site request forgery vulnerability that allows remote attackers to force victims to delete posts by crafting malicious HTML forms.Check if you run itEPSS 0.20%May 25, 2026
- High8.8Twitter-Clone 1 contains a SQL injection vulnerability in follow.php that allows attackers to manipulate database queries by injecting SQL code through the userid parameter.Check if you run itEPSS 0.31%May 25, 2026
- High7.0Soroush IM Desktop App 0.17.0 contains an authentication bypass vulnerability that allows local attackers to remove passcodes by injecting pre-encrypted database entri…Check if you run itEPSS 0.12%May 25, 2026
- High8.6AgataSoft Auto PingMaster 1.5 contains a stack-based buffer overflow vulnerability in the Trace Route host name field that allows local attackers to execute arbitrary…Check if you run itEPSS 0.19%May 25, 2026
- High8.6Splinterware System Scheduler Pro 5.12 contains an insecure file permissions vulnerability that allows low-privilege users to escalate privileges by modifying service…Check if you run itEPSS 0.16%May 25, 2026
- High7.4A weakness has been identified in Edimax EW-7438RPn 1.31.Check if you run itEPSS 0.75%May 25, 2026
- High8.9A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 2.09%May 25, 2026
- Critical9.3For untrusted certificates that contain the "Authority Information Access - caIssuers URI" extension, Szafir SDK will automatically download the parent CA certificate…Check if you run itEPSS 0.31%May 25, 2026
- Medium5.5A vulnerability was detected in FoundDream miniclawd up to 2d65665046e2222eeea76cafc8570ed546a8c125.Check if you run itEPSS 1.52%May 25, 2026
- Medium5.5A security vulnerability has been detected in FoundDream miniclawd up to 2d65665046e2222eeea76cafc8570ed546a8c125.Check if you run itEPSS 1.52%May 25, 2026
- Low2.1A weakness has been identified in code-projects Employee Management System 1.0.Check if you run itEPSS 0.25%May 25, 2026
- Low2.1A vulnerability was identified in code-projects Employee Management System 1.0.Check if you run itEPSS 0.25%May 25, 2026
- Medium5.3Apache Airflow FAB Auth Manager contains an LDAP filter injection vulnerability (CWE-90) that allows unauthenticated attackers to exfiltrate directory data or bypass a…Check if you run itEPSS 0.57%May 25, 2026
- Medium5.3OutSystems Lifetime is vulnerable to Authorization Bypass Through User-Controlled Key vulnerability in ApplicationID parameter.Check if you run itEPSS 0.50%May 25, 2026
- High7.4A weakness has been identified in Edimax BR-6478AC 1.23.Check if you run itEPSS 0.59%May 25, 2026
- Medium5.2This vulnerability exists in CP Plus Wi-Fi Camera due to improper protection of sensitive information in runtime memory.Check if you run itEPSS 0.13%May 25, 2026
- Medium6.5Cargo incorrectly handled symlinks inside of crate tarballs downloaded from third-party registries, allowing a malicious crate to override the source code of another c…Check if you run itEPSS 0.29%May 25, 2026
- Low2.3Cargo between 1.68 and 1.96 incorrectly normalized the URLs of third-party registries using the sparse index protocol.Check if you run itEPSS 0.48%May 25, 2026
- High8.1Apache Airflow providers-google's disables SSH host-key verification by default, exposing SSH traffic between an Airflow worker and a Compute Engine VM to in-path netw…Check if you run itEPSS 0.59%May 25, 2026
- Low2.1A vulnerability was identified in Edimax BR-6478AC 1.23.Check this weekEPSS 16.60%May 25, 2026
- Low2.1A vulnerability was determined in Edimax BR-6675nD 1.12.Check if you run itEPSS 1.91%May 25, 2026
Sort