Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5A flaw was found in JSS (Java Security Services).Check if you run itEPSS 0.18%Aug 24, 2026
- High7.1Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the adm…Check if you run itEPSS 0.24%Aug 24, 2026
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Super Forms allows Path Traversal.Check if you run itEPSS 0.50%Aug 24, 2026
- High7.5fast-uri is a URI parser for Node.js.Check if you run itEPSS 0.23%Aug 24, 2026
- High7.5fast-uri is a URI parser for Node.js.Check if you run itEPSS 0.22%Aug 24, 2026
- High7.5fast-uri is a URI parser for Node.js.Check if you run itEPSS 0.40%Aug 24, 2026
- High7.5fast-uri is a URI parser for Node.js.Check if you run itEPSS 0.22%Aug 24, 2026
- Medium6.0The HTTP media server on DJI drones does not enforce sufficient limits on incoming connections or request rates.Check if you run itEPSS 0.24%Aug 24, 2026
- High8.5DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration parameters, inc…Check if you run itEPSS 0.24%Aug 24, 2026
- High8.7The HTTP media server running on DJI drones serves stored photos and videos through the endpoint without authenticating the requesting client.Check if you run itEPSS 0.41%Aug 24, 2026
- Medium5.3The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned…Check if you run itEPSS 0.34%Aug 24, 2026
- Low1.3A vulnerability has been found in Piwigo 16.3.0.Check if you run itEPSS 0.66%Aug 24, 2026
- Low2.1A flaw has been found in Open5GS up to 2.8.0.Check if you run itEPSS 0.53%Aug 24, 2026
- Medium6.9A vulnerability was determined in jQWidgets up to 24.0.1.Check if you run itEPSS 0.58%Aug 24, 2026
- High8.4exceljs through 4.4.0 fails to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output.Check if you run itEPSS 0.41%Aug 24, 2026
- High8.7exceljs through 4.4.0 contains a path traversal vulnerability in the Workbook.addImage() function that fails to validate file paths.Check if you run itEPSS 0.51%Aug 24, 2026
- Critical9.3exceljs through 4.4.0 contains a prototype pollution vulnerability in the deepMerge helper that fails to reject __proto__, constructor, or prototype keys when merging note objects.Check if you run itEPSS 0.60%Aug 24, 2026
- High8.7exceljs through 4.4.0 decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio.Check if you run itEPSS 0.63%Aug 24, 2026
- Medium6.9BentoML's outbound connection safeguard (make_safe_connect in _internal/utils/uri.py) blocks private, loopback, and link-local IP addresses but fails to reject the RFC…Check if you run itEPSS 0.41%Aug 24, 2026
- Low2.1A flaw has been found in Open5GS 2.8.0.Check if you run itEPSS 0.37%Aug 24, 2026
- Low2.1A vulnerability was detected in Open5GS 2.8.0.Check if you run itEPSS 0.28%Aug 24, 2026
- Low2.1A security vulnerability has been detected in Open5GS 2.8.0.Check if you run itEPSS 0.56%Aug 24, 2026
- Low2.1A vulnerability has been found in CTFd up to 3.8.4.Check if you run itEPSS 0.56%Aug 23, 2026
- Critical9.8DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quote_float.Check if you run itEPSS 0.67%Aug 23, 2026
- Low3.7Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey.Check if you run itEPSS 0.44%Aug 23, 2026
Sort