Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.6An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Import a Theme function.Check if you run itEPSS 0.45%Apr 17, 2025
- Medium6.5An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the create Notes function.Check if you run itEPSS 0.39%Apr 17, 2025
- Medium6.5An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the Travel Ideas" function.Check if you run itEPSS 0.39%Apr 17, 2025
- Medium6.5An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the Upload function.Check if you run itEPSS 0.39%Apr 17, 2025
- Medium6.5An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the my-contacts-settings component.Check if you run itEPSS 0.39%Apr 17, 2025
- High7.6An issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the Proxy Manager component.Check if you run itEPSS 0.44%Apr 17, 2025
- High7.6An issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the Mail Setting component.Check if you run itEPSS 0.44%Apr 17, 2025
- Medium6.5An issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via the site settings component.Check if you run itEPSS 0.39%Apr 17, 2025
- Medium6.5An issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via the link identification function.Check if you run itEPSS 0.39%Apr 17, 2025
- Medium6.2An issue in DataPatrol Screenshot watermark, printing watermark agent v.3.5.2.0 allows a physically proximate attacker to obtain sensitive information.Check if you run itEPSS 0.20%Apr 17, 2025
- High7.2FOXCMS <= V1.25 is vulnerable to SQL Injection via $param['title'] in /admin/util/Field.php.Check if you run itEPSS 0.40%Apr 17, 2025
- High7.2In FOXCMS <=1.25, the installdb.php file has a time - based blind SQL injection vulnerability.Check if you run itEPSS 0.40%Apr 17, 2025
- Critical9.8Buffer Overflow vulnerability inALFA WiFi CampPro router ALFA_CAMPRO-co-2.29 allows a remote attacker to execute arbitrary code via the hiddenIndex in the function StorageEditUserCheck if you run itEPSS 1.10%Apr 17, 2025
- Critical9.8Buffer Overflow vulnerability inALFA WiFi CampPro router ALFA_CAMPRO-co-2.29 allows a remote attacker to execute arbitrary code via the GAPSMinute3 key valueCheck if you run itEPSS 1.10%Apr 17, 2025
- Critical9.8Buffer Overflow vulnerability in ALFA_CAMPRO-co-2.29 allows a remote attacker to execute arbitrary code via the newap_text_0 key valueCheck if you run itEPSS 1.10%Apr 17, 2025
- Critical9.8Buffer Overflow vulnerability in Netgear- R61 router V1.0.1.28 allows a remote attacker to execute arbitrary code via the QUERY_STRING key valueCheck if you run itEPSS 1.10%Apr 17, 2025
- Critical9.8An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the function 0x417234Check if you run itEPSS 1.83%Apr 17, 2025
- Critical9.8An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the macaddr key value to the function 0x42232cCheck if you run itEPSS 2.34%Apr 17, 2025
- Critical9.8An issue in dlink DIR 823x 240802 allows a remote attacker to execute arbitrary code via the target_addr key value and the function 0x41710cCheck if you run itEPSS 1.41%Apr 17, 2025
- Critical9.8An issue in dlink DIR 823x 240802 allows a remote attacker to execute arbitrary code via the target_addr key value and the function 0x41737cCheck if you run itEPSS 1.41%Apr 17, 2025
- High7.2An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the function 0x41dda8Check if you run itEPSS 1.28%Apr 17, 2025
- Medium6.1Code Astro Internet Banking System 2.0.0 is vulnerable to Cross Site Scripting (XSS) via the name parameter in /admin/pages_account.php.Check if you run itEPSS 0.31%Apr 17, 2025
- Medium6.5An arbitrary file deletion vulnerability in the /post/{postTitle} component of flaskBlog v2.6.1 allows attackers to delete article titles created by other users via supplying a craCheck if you run itEPSS 0.22%Apr 17, 2025
- Critical9.8A SQL Injection vulnerability exists in the parameter of the progress-body-weight.php endpoint of Dietiqa App v1.0.20.Check if you run itEPSS 0.53%Apr 17, 2025
- Low3.3DragonflyDB Dragonfly through 1.28.2 (fixed in 1.29.0) allows authenticated users to cause a denial of service (daemon crash) via a Lua library command that references a large negaCheck if you run itEPSS 0.30%Apr 17, 2025
Sort