Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2The rtsol(8) and rtsold(8) programs do not validate the domain search list options provided in router advertisement messages; the option body is passed to resolvconf(8) unmodified.Check if you run itEPSS 6.52%Mar 9, 2026
- High7.4A weakness has been identified in UTT HiPER 810G up to 1.7.7-1711.Check if you run itEPSS 0.82%Mar 9, 2026
- Medium5.4In AWS Auth manager, the origin of the SAML authentication has been used as provided by the client and not verified against the actual instance URL.Check if you run itEPSS 0.37%Mar 9, 2026
- High8.8A user with access to the DB could craft a database entry that would result in executing code on Triggerer - which gives anyone who have access to DB the same permissi…Check if you run itEPSS 0.71%Mar 9, 2026
- Low2.1A vulnerability was identified in opencc JFlow up to 5badc00db382d7cb82dad231e6a866b18e0addfe.Check if you run itEPSS 0.38%Mar 9, 2026
- High7.5An unauthenticated remote attacker can obtain valid session tokens because they are exposed in plaintext within the URL parameters of the wwwupdate.cgi endpoint in UBR.Check if you run itEPSS 0.33%Mar 9, 2026
- Medium6.5A low‑privileged remote attacker can directly interact with the wwwdnload.cgi endpoint to download any resource available to administrators, including system backups a…Check if you run itEPSS 0.25%Mar 9, 2026
- Medium6.2An unauthenticated attacker can abuse the weak hash of the backup generated by the wwwdnload.cgi endpoint to gain unauthorized access to sensitive data, including pass…Check if you run itEPSS 0.08%Mar 9, 2026
- High7.8A low‑privileged local attacker who gains access to the UBR service account (e.g., via SSH) can escalate privileges to obtain full system access.Check if you run itEPSS 0.17%Mar 9, 2026
- Low2.1A weakness has been identified in SourceCodester/janobe Resort Reservation System 1.0.Check if you run itEPSS 0.31%Mar 9, 2026
- High7.4A vulnerability was identified in Tenda i3 1.0.0.6(2204).Check if you run itEPSS 0.66%Mar 9, 2026
- High8.3Taipower APP for Andorid developed by Taipower has an Improper Certificate Validation vulnerability.Check if you run itEPSS 0.15%Mar 9, 2026
- Low1.9A weakness has been identified in Qi-ANXIN QAX Virus Removal up to 2025-10-22.Check if you run itEPSS 0.22%Mar 9, 2026
- Medium5.5A vulnerability was identified in doramart DoraCMS 3.0.x.Check if you run itEPSS 0.68%Mar 9, 2026
- Low2.1A vulnerability was determined in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.38%Mar 9, 2026
- Low2.1A vulnerability was found in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.31%Mar 9, 2026
- Low2.1A vulnerability has been found in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.31%Mar 9, 2026
- Low2.1A flaw has been found in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.31%Mar 9, 2026
- Low2.1A vulnerability was detected in Bytedesk up to 1.3.9.Check if you run itEPSS 0.44%Mar 9, 2026
- Low2.1A security vulnerability has been detected in Bytedesk up to 1.3.9.Check if you run itEPSS 0.44%Mar 9, 2026
- Critical9.8The Tutor LMS Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 3.9.5 via the Social Login addon.Patch nowKEVEPSS 0.68%Mar 9, 2026
- Low2.1A vulnerability was identified in EasyCMS up to 1.6.Check if you run itEPSS 0.29%Mar 8, 2026
- Low2.1A weakness has been identified in itsourcecode sanitize or validate this input 1.0.Check if you run itEPSS 0.28%Mar 8, 2026
- Medium5.5A vulnerability was identified in itsourcecode University Management System 1.0.Check if you run itEPSS 0.34%Mar 8, 2026
- Medium5.5A weakness has been identified in projectworlds Online Art Gallery Shop 1.0.Check if you run itEPSS 0.36%Mar 8, 2026
Sort