Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Improper enforcement of the Disable password saving in vaults setting in the connection entry component in Devolutions Remote Desktop Manager 2025.3.30 and earlier all…Check if you run itEPSS 0.46%Mar 3, 2026
- High8.1OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.49%Mar 3, 2026
- Critical9.8OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 2.42%Mar 3, 2026
- Medium5.1OpenSTAManager is an open source management software for technical assistance and invoicing.Check if you run itEPSS 0.28%Mar 3, 2026
- Medium5.1Dify is an open-source LLM app development platform.Check if you run itEPSS 0.25%Mar 3, 2026
- High8.9A flaw has been found in D-Link DIR-868L 110b03.Check if you run itEPSS 5.31%Mar 3, 2026
- High7.8Dell Optimizer, versions prior to 6.3.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability.Check if you run itEPSS 0.19%Mar 3, 2026
- High7.8Dell Command | Intel vPro Out of Band, versions prior to 4.7.0, contain an Uncontrolled Search Path Element vulnerability.Check if you run itEPSS 0.20%Mar 3, 2026
- Medium6.5IBM webMethods API Gateway (on-prem) 10.11 through 10.11_Fix3210.15 to 10.15_Fix2711.1 to 11.1_Fix7 IBM webMethods API Management (on-prem) fails to properly validate…Check if you run itEPSS 0.35%Mar 3, 2026
- Critical9.8Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetDomainFilter.Check if you run itEPSS 0.67%Mar 3, 2026
- High7.5IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 returns sensitive information in an HTTP response that could be used in further attacks against the system.Check if you run itEPSS 0.26%Mar 3, 2026
- Medium5.9IBM App Connect Operator versions CD 11.3.0 through 11.6.0 and 12.1.0 through 12.20.0, LTS versions 12.0.0 through 12.0.20, and IBM App Connect Enterprise Certified Co…Check if you run itEPSS 0.21%Mar 3, 2026
- High7.5Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the component uac_temp.db.Check if you run itEPSS 0.24%Mar 3, 2026
- Medium5.3Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded encryption key which could allow attackers to access sensitive information.Check if you run itEPSS 0.19%Mar 3, 2026
- High8.8Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain an authenticated command injection vulnerability via the HMI Name parameter.Check if you run itEPSS 1.49%Mar 3, 2026
- High7.5Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded password in the FTP protocol.Check if you run itEPSS 0.39%Mar 3, 2026
- High7.3dr_libs version 0.14.4 and earlier (fixed in commit 8a7258c) contain a heap buffer overflow vulnerability in the drwav__read_smpl_to_metadata_obj() function of dr_wav.h that allowsCheck if you run itEPSS 0.25%Mar 3, 2026
- Medium5.3DOMPurify 3.1.3 through 3.3.1 and 2.5.3 through 2.5.8, fixed in commit 2726c74, contain a cross-site scripting vulnerability that allows attackers to bypass attribute…Check if you run itEPSS 0.39%Mar 3, 2026
- High7.5Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formGetIptv function and the list parameter, which can cause memory corruption and enable remote code execution.Check if you run itEPSS 0.83%Mar 3, 2026
- High7.2Cohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to contain an authenticated command injection vulnerability.Check if you run itEPSS 2.56%Mar 3, 2026
- Medium5.1DOMPurify 3.1.3 through 3.2.6 and 2.5.3 through 2.5.8 contain a cross-site scripting vulnerability that allows attackers to bypass attribute sanitization by exploiting…Check if you run itEPSS 0.29%Mar 3, 2026
- High8.8An issue was discovered in Nokia Impact before Mobile 23_FP1.Check if you run itEPSS 0.28%Mar 3, 2026
- High8.2Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform a Time-based Boolean Blind SQL Injection attack on the endpoint /ui/rest-prox…Check if you run itEPSS 0.27%Mar 3, 2026
- Low1.3A vulnerability was determined in Tuya App and SDK 24.07.11 on Android.Check if you run itEPSS 0.34%Mar 3, 2026
- High8.5iBoysoft NTFS for Mac contains a local privilege escalation vulnerability in its privileged helper daemon ntfshelperd.Check if you run itEPSS 0.19%Mar 3, 2026
Sort