Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.3DragonflyDB Dragonfly before 1.27.0 allows authenticated users to cause a denial of service (daemon crash) via a crafted Redis command.Check if you run itEPSS 0.42%Apr 17, 2025
- High7.5Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via cloneType2.Check if you run itEPSS 0.70%Apr 17, 2025
- High7.5Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via wanMTU2.Check if you run itEPSS 0.59%Apr 17, 2025
- High7.5Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via wanSpeed2.Check if you run itEPSS 0.59%Apr 17, 2025
- Unknownglpi-project GLPI Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 86.81%Apr 17, 2025
- High8.6Broadcom Brocade Fabric OS Code Injection VulnerabilityPatch nowKEVEPSS 0.69%Apr 17, 2025
- Critical9.8Hazelcast Management Center through 6.0 allows remote code execution via a JndiLoginModule user.provider.url in a hazelcast-client XML document (aka a client configuration file), wCheck if you run itEPSS 1.02%Apr 17, 2025
- High7.1OpenMetadata <=1.4.1 is vulnerable to SQL Injection.Check if you run itEPSS 0.63%Apr 17, 2025
- High8.4An issue in Think Router Tk-Rt-Wr135G V3.0.2-X000 allows attackers to bypass authentication via a crafted cookie.Check if you run itEPSS 0.28%Apr 17, 2025
- Critical9.8Pycel through 1.0b30, when operating on an untrusted spreadsheet, allows code execution via a crafted formula in a cell, such as one beginning with the =IF(A1=200, eval("__import__Check if you run itEPSS 0.98%Apr 17, 2025
- Medium5.4Pydio Core <= 8.2.5 is vulnerable to Cross Site Scripting (XSS) via the New URL Bookmark feature.Check if you run itEPSS 0.28%Apr 17, 2025
- High8.8Out-of-Bounds Read in netfilter/ipset in Linux Kernel ChromeOS [6.1, 5.15, 5.10, 5.4, 4.19] allows a local attacker with low privileges to trigger an out-of-bounds read, potentiallCheck if you run itEPSS 0.22%Apr 16, 2025
- Medium6.5ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices and intercept deviceCheck if you run itEPSS 0.21%Apr 16, 2025
- High8.8Access Control Vulnerability in Gerrit chromiumos project configuration in Google ChromeOS 16063.87.0 allows an attacker with a registered Gerrit account to inject malicious code iCheck if you run itEPSS 0.41%Apr 16, 2025
- High7.5DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose plaintext DNS queries via failure to properly tunnel DNS trafCheck if you run itEPSS 0.20%Apr 16, 2025
- Medium6.8Overview The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' (doubled triple dot sCheck if you run itEPSS 0.45%Apr 16, 2025
- Medium4.9Overview XML documents optionally contain a Document Type Definition (DTD), which, among other features, enables the definition of XML entities.Check if you run itEPSS 0.46%Apr 16, 2025
- Medium4.9Overview XML documents optionally contain a Document Type Definition (DTD), which, among other features, enables the definition of XML entities.Check if you run itEPSS 0.43%Apr 16, 2025
- Medium4.4Overview The software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users.Check if you run itEPSS 0.30%Apr 16, 2025
- Medium6.8Overview The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' (doubled triple dot sCheck if you run itEPSS 0.51%Apr 16, 2025
- Critical9.1Overview The product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an identifier for a resource that mCheck if you run itEPSS 0.96%Apr 16, 2025
- Medium4.4Overview The software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users.Check if you run itEPSS 0.30%Apr 16, 2025
- Medium6.1Overview The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.Check if you run itEPSS 0.15%Apr 16, 2025
- Medium4.3The Backstage Scaffolder plugin houses types and utilities for building scaffolder-related modules.Check if you run itEPSS 0.30%Apr 16, 2025
- Low3.1EspoCRM is an Open Source Customer Relationship Management software.Check if you run itEPSS 0.44%Apr 16, 2025
Sort