Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root.Check if you run itEPSS 0.47%Jun 3, 2026
- High8.7A remote attacker with user privileges can exploit a stack buffer overflow in dali-devconfig to gain full system access as root.Check if you run itEPSS 0.46%Jun 3, 2026
- High8.7A remote attacker with user privileges can exploit a stack buffer overflow to gain full system access as root.Check if you run itEPSS 0.46%Jun 3, 2026
- High8.7The ugw-logread method allows a remote attacker with user privileges to access arbitrary local files due to insufficient validation of user-supplied input.Check if you run itEPSS 0.49%Jun 3, 2026
- High7.2The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes due to insufficient validation of user-supplied input.Check if you run itEPSS 0.37%Jun 3, 2026
- High7.2The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.Check if you run itEPSS 0.37%Jun 3, 2026
- High7.2The ugw-restore method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.Check if you run itEPSS 0.37%Jun 3, 2026
- High7.2The ugw-logstop method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.Check if you run itEPSS 0.37%Jun 3, 2026
- High7.2The ugw-delete-file method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.Check if you run itEPSS 0.37%Jun 3, 2026
- High7.2The bac-scanresult method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.Check if you run itEPSS 0.37%Jun 3, 2026
- Critical9.3An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices.Check if you run itEPSS 0.47%Jun 3, 2026
- Low1.9A vulnerability has been found in cilium ebpf up to 0.21.0.Check if you run itEPSS 0.18%Jun 3, 2026
- High7.3SWUpdate before 2026.05 is affected by a time-of-check time-of-use (TOCTOU) race condition that allows local unprivileged attackers to escalate privileges to root or i…Check if you run itEPSS 0.10%Jun 3, 2026
- High8.6Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 88.20%Jun 3, 2026
- Critical9.8ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy Assessment: Fully addressed.Check if you run itEPSS 0.50%Jun 3, 2026
- High7.5It is possible for an unauthenticated adjacent attacker to download log files of the controller, which may disclose some restricted information.Check if you run itEPSS 0.26%Jun 3, 2026
- High8.8Incorrect Privilege Assignment vulnerability in Mojoomla School Management allows Privilege Escalation.Check if you run itEPSS 0.23%Jun 3, 2026
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mojoomla School Management allows SQL Injection.Check if you run itEPSS 0.23%Jun 3, 2026
- High7.2Incorrect Authorization vulnerability in ABB T-MAC Plus.Check if you run itEPSS 0.18%Jun 3, 2026
- High7.2Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in ABB T-MAC Plus.Check if you run itEPSS 0.18%Jun 3, 2026
- High7.3Authorization bypass through User-Controlled key vulnerability in ABB T-MAC Plus.Check if you run itEPSS 0.29%Jun 3, 2026
- High7.3Files or directories accessible to external parties vulnerability in ABB T-MAC Plus.Check if you run itEPSS 0.35%Jun 3, 2026
- High7.7A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI Gateway secrets, which can be exploited to exfiltrat…Check if you run itEPSS 0.52%Jun 3, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fox-themes Prague allows Reflected XSS.Check if you run itEPSS 0.15%Jun 3, 2026
- Medium5.3Impact: The morgan logging middleware's :remote-user token extracts the Basic auth username from the Authorization request header and writes it to the log stream witho…Check if you run itEPSS 0.33%Jun 3, 2026
Sort