Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1V-SOL GPON/EPON OLT Platform v2.03 contains multiple reflected cross-site scripting vulnerabilities due to improper input sanitization in various script parameters.Check if you run itEPSS 0.27%Jan 7, 2026
- Medium5.1Yahei-PHP Prober 0.4.7 contains a remote HTML injection vulnerability that allows attackers to execute arbitrary HTML code through the 'speed' GET parameter.Check if you run itEPSS 0.28%Jan 7, 2026
- Medium5.1FaceSentry Access Control System 6.4.8 contains a cross-site scripting vulnerability in the 'msg' parameter of pluginInstall.php that allows attackers to inject malicious scripts.Check if you run itEPSS 0.32%Jan 7, 2026
- Medium5.1SOCA Access Control System 180612 contains a cross-site scripting vulnerability in the 'senddata' POST parameter of logged_page.php that allows attackers to inject malicious scriptCheck if you run itEPSS 0.24%Jan 7, 2026
- Medium6.8FaceSentry Access Control System 6.4.8 contains a cleartext password storage vulnerability that allows attackers to access unencrypted credentials in the device's SQLite database.Check if you run itEPSS 0.22%Jan 7, 2026
- Critical9.1FaceSentry Access Control System 6.4.8 contains a cleartext transmission vulnerability that allows remote attackers to intercept authentication credentials.Check if you run itEPSS 0.33%Jan 7, 2026
- High8.7FLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 contains an authenticated OS command injection vulnerability that allows attackers to execute shell commands with root privileCheck this weekEPSS 15.82%Jan 7, 2026
- Critical9.3FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 contains hard-coded SSH credentials that cannot be changed through normal camera operations.Check this weekEPSS 33.00%Jan 7, 2026
- High8.7FLIR Thermal Camera F/FC/PT/D Stream firmware version 8.0.0.64 contains an unauthenticated vulnerability that allows remote attackers to access live camera streams without credentiCheck this weekEPSS 47.00%Jan 7, 2026
- High8.7FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 contains an information disclosure vulnerability that allows unauthenticated attackers to read arbitrary files through unverCheck if you run itEPSS 9.46%Jan 7, 2026
- High8.9urllib3 is an HTTP client library for Python.Check if you run itEPSS 2.92%Jan 7, 2026
- Medium5.5RustFS is a distributed object storage system built in Rust.Check if you run itEPSS 0.34%Jan 7, 2026
- High8.8RustFS is a distributed object storage system built in Rust.Check if you run itEPSS 7.26%Jan 7, 2026
- Medium6.8Bio-Formats versions up to and including 8.3.0 perform unsafe Java deserialization of attacker-controlled memoization cache files (.bfmemo) during image processing.Check if you run itEPSS 0.51%Jan 7, 2026
- Medium4.6Bio-Formats versions up to and including 8.3.0 contain an XML External Entity (XXE) vulnerability in the Leica Microsystems metadata parsing component (e.g., XLEF).Check if you run itEPSS 0.17%Jan 7, 2026
- Medium4.6OpenLDAP Lightning Memory-Mapped Database (LMDB) versions up to and including 0.9.14, prior to commit 8e1fda8, contain a heap buffer underflow in the readline() function of mdb_loaCheck if you run itEPSS 0.15%Jan 7, 2026
- Medium6.9The deploy-stub component in Panda3D versions up to and including 1.10.16 contains a denial of service vulnerability due to unbounded stack allocation.Check if you run itEPSS 0.21%Jan 7, 2026
- Medium5.1The egg-mkfont utility in Panda3D versions up to and including 1.10.16 contains an uncontrolled format string vulnerability.Check if you run itEPSS 0.37%Jan 7, 2026
- Medium6.9The egg-mkfont utility in Panda3D versions up to and including 1.10.16 contains a stack-based buffer overflow vulnerability due to use of an unbounded sprintf() call with attacker-Check if you run itEPSS 0.52%Jan 7, 2026
- Medium4.9Cisco Identity Services Engine Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 6.08%Jan 7, 2026
- Medium5.3Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3…Check if you run itEPSS 0.60%Jan 7, 2026
- Critical9.6A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications.Check if you run itEPSS 1.33%Jan 7, 2026
- Low1.9A vulnerability was detected in projectworlds House Rental and Property Listing 1.0.Check if you run itEPSS 0.25%Jan 7, 2026
- Medium5.3The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and inCheck this weekEPSS 22.00%Jan 7, 2026
- Medium5.3The Piraeus Bank WooCommerce Payment Gateway plugin for WordPress is vulnerable to unauthorized order status modification in all versions up to, and including, 3.1.4.Check this weekEPSS 40.00%Jan 7, 2026
Sort