Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlink_ns_capable() check for peer netns rtnl_newlink() lacks a CAP_NET_ADM…Check if you run itEPSS 0.12%Apr 30, 2026
- Medium5.3The Five Star Restaurant Reservations plugin for WordPress is vulnerable to a payment bypass via PHP type juggling in versions up to, and including, 2.7.16 This is due…Check if you run itEPSS 0.18%Apr 30, 2026
- Medium5.9Apache Airflow's SMTP provider called Python's without an SSL context, so no certificate validation was performed on the TLS upgrade.Check if you run itEPSS 0.27%Apr 30, 2026
- High7.8When exchanging data over a socket, libnv uses select(2) to wait for data to arrive.Check if you run itEPSS 0.15%Apr 30, 2026
- High8.1When processing the header of an incoming message, libnv failed to properly validate the message size.Check if you run itEPSS 0.32%Apr 30, 2026
- High7.8An operator precedence bug in the kernel results in a scenario where a buffer overflow causes attacker-controlled data to overwrite adjacent execve(2) argument buffers.Check if you run itEPSS 0.18%Apr 30, 2026
- High8.7Unauthenticated attackers can exploit a weakness in the XML parser functionality of the SOAP endpoints in 4D server.Check if you run itEPSS 0.45%Apr 30, 2026
- UnknownHeap-buffer-overflow in lj_record_idxOpen the advisoryApr 30, 2026
- Critical9.3Synway smg_gateway_management_software Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 5.73%Apr 30, 2026
- Critical9.3Weaver e-office Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.77%Apr 30, 2026
- High8.7Weaver e-cology Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.70%Apr 30, 2026
- Medium5.5A weakness has been identified in BurtTheCoder mcp-dnstwist up to 1.0.4.Check if you run itEPSS 1.52%Apr 29, 2026
- High7.4A vulnerability was identified in UTT HiPER 1250GW up to 3.2.7-210907-180535.Check if you run itEPSS 0.54%Apr 29, 2026
- Medium5.5A weakness has been identified in getsimpletool mcpo-simple-server up to 0.2.0.Check if you run itEPSS 0.51%Apr 29, 2026
- High7.3A vulnerability in B1 Free Archiver v1.5.86 allows files extracted from downloaded archives to bypass Windows Mark of the Web (MotW) protections.Check if you run itEPSS 0.33%Apr 29, 2026
- Medium6.1Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network act…Check if you run itEPSS 0.25%Apr 29, 2026
- Medium6.0Insufficient option length validation in the IPv6 Router Advertisement parser in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause a…Check if you run itEPSS 0.23%Apr 29, 2026
- Low2.1A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0.Check if you run itEPSS 0.32%Apr 29, 2026
- High8.7Cockpit CMS contains an authenticated remote code execution vulnerability in the /cockpit/collections/save_collection endpoint that allows authenticated attackers with…Check if you run itEPSS 0.84%Apr 29, 2026
- Critical9.3Tenda FH303/A300 firmware V5.07.68_EN contains a session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient…Check if you run itEPSS 0.65%Apr 29, 2026
- Critical9.3Tenda W3002R/A302/W309R wireless routers version V5.07.64_en contain a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settin…Check if you run itEPSS 0.65%Apr 29, 2026
- Critical9.3Tenda W308R v2 V5.07.48 contains a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient session validation.Check if you run itEPSS 0.65%Apr 29, 2026
- High8.6Alloksoft Video joiner 4.6.1217 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string in the L…Check if you run itEPSS 0.16%Apr 29, 2026
- High8.6Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an ov…Check if you run itEPSS 0.17%Apr 29, 2026
- Medium6.9SysGauge 4.5.18 contains a buffer overflow vulnerability in the proxy configuration handler that allows local attackers to cause a denial of service by supplying an ov…Check if you run itEPSS 0.12%Apr 29, 2026
Sort