Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing unauthenticated local attackers to exploit Relative Path Traversal to download arb…Check if you run itEPSS 0.35%May 29, 2026
- High8.6DreamMaker developed by Interinfo has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby e…Check if you run itEPSS 0.46%May 29, 2026
- Low2.1A vulnerability was found in TRENDnet TEW-432BRP 3.10B20.Check if you run itEPSS 5.50%May 29, 2026
- Low2.1A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20.Check if you run itEPSS 5.50%May 29, 2026
- High8.7An unhandled exception in Suprema BioStar 2 (Server), versions 2.9.8, 2.9.10, and 2.9.11, that allows an unauthenticated remote attacker to cause a denial of service (…Check if you run itEPSS 0.35%May 29, 2026
- Critical10.0Incorrect permission settings on a critical resource in Suprema BioStar 2 (versions 2.9.3 through 2.9.11) that allow backup files to be publicly exposed when the admin…Check if you run itEPSS 0.34%May 29, 2026
- Critical10.0Path traversal vulnerability in Remote Spark (https://www.Remotespark.Com/) SparkView allows reading and writing arbitrary files in all directories as root.Check if you run itEPSS 0.38%May 29, 2026
- Medium4.1Uncontrolled resource consumption in the Wireless Control Module (WCM) of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker…Check if you run itEPSS 0.17%May 29, 2026
- Medium4.1Weak authentication between the Wireless Control Module (WCM) and the Engine Control Module (ECM) of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows a…Check if you run itEPSS 0.11%May 29, 2026
- High8.7HAX CMS helps manage microsite universe with PHP or NodeJs backends.Check if you run itEPSS 0.23%May 29, 2026
- Medium5.1Group-Office is an enterprise customer relationship management and groupware tool.Check if you run itEPSS 0.23%May 29, 2026
- Critical9.9RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine.Check if you run itEPSS 0.45%May 29, 2026
- Critical9.3RustFS is a distributed object storage system built in Rust.Check if you run itEPSS 0.23%May 29, 2026
- Critical9.3DreamMaker developed by Interinfo has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, ther…Check if you run itEPSS 0.51%May 29, 2026
- Medium5.4A stored Cross-Site Scripting (XSS) vulnerability exists in the project selector component of Mautic 7.Check if you run itEPSS 0.17%May 29, 2026
- High7.6A stored Cross-Site Scripting (XSS) vulnerability exists in the Projects component of Mautic 7.Check if you run itEPSS 0.21%May 29, 2026
- High7.1An authorization bypass vulnerability exists in the Mautic 7 API v2 endpoints (utilizing API Platform).Check if you run itEPSS 0.20%May 29, 2026
- Critical9.9A path traversal vulnerability exists in the campaign import feature of Mautic 7.Check if you run itEPSS 0.58%May 29, 2026
- High7.5Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Waterfall WF-500 RX Host in ver…Check if you run itEPSS 0.51%May 29, 2026
- High7.5Nozomi Networks Labs identified a CWE-23: Relative Path Traversal (Zip Slip) in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows attackers with acce…Check if you run itEPSS 0.15%May 29, 2026
- High8.6Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Wat…Check if you run itEPSS 0.88%May 29, 2026
- High7.5Nozomi Networks Labs identified a CWE-125: Out-of-bounds Read in Waterfall WF-500 RX Host in version 7.10.0.0 R2601141040 that allows attackers with access to the TX H…Check if you run itEPSS 0.12%May 29, 2026
- Critical9.3Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall…Check if you run itEPSS 1.38%May 29, 2026
- Critical9.3Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall…Check if you run itEPSS 1.38%May 29, 2026
- Critical9.3Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall…Check if you run itEPSS 1.38%May 29, 2026
Sort