Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows attackers to execute system commands with root privileges.Check if you run itEPSS 0.44%Dec 24, 2025
- Medium6.9Teradek VidiU Pro 3.0.3 contains a server-side request forgery vulnerability in the management interface that allows attackers to manipulate GET parameters 'url' and 'xml_url'.Check if you run itEPSS 0.33%Dec 24, 2025
- High8.7FaceSentry 6.4.8 contains an authenticated remote command injection vulnerability in pingTest.php and tcpPortTest.php scripts.Check if you run itEPSS 2.61%Dec 24, 2025
- Critical9.8FaceSentry Access Control System 6.4.8 contains a critical authentication vulnerability with hard-coded SSH credentials for the wwwuser account.Check if you run itEPSS 0.73%Dec 24, 2025
- Medium5.1AVE DOMINAplus 1.10.x contains cross-site request forgery and cross-site scripting vulnerabilities that allow attackers to perform administrative actions without user consent.Check if you run itEPSS 0.21%Dec 24, 2025
- Critical9.3Microhard Systems IPn4G 1.1.0 contains hardcoded default credentials that cannot be changed through normal gateway operations.Check if you run itEPSS 0.39%Dec 24, 2025
- High7.1Microhard Systems IPn4G 1.1.0 contains a configuration file disclosure vulnerability that allows authenticated attackers to download sensitive system configuration files.Check if you run itEPSS 0.47%Dec 24, 2025
- High7.1NovaRad NovaPACS Diagnostics Viewer 8.5.19.75 contains an unauthenticated XML External Entity (XXE) injection vulnerability in XML preference import settings.Check if you run itEPSS 0.43%Dec 24, 2025
- High8.7FLIR AX8 Thermal Camera 1.32.16 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials.Check if you run itEPSS 0.53%Dec 24, 2025
- Critical9.3FLIR AX8 Thermal Camera 1.32.16 contains hard-coded SSH and web panel credentials that cannot be changed through normal camera operations.Check if you run itEPSS 0.62%Dec 24, 2025
- Critical9.3Anviz AIM CrossChex Standard 4.3.6.0 contains a CSV injection vulnerability that allows attackers to execute commands by inserting malicious formulas in user import fields.Check if you run itEPSS 0.70%Dec 24, 2025
- Medium5.3Missing Authorization vulnerability in Claspo Popup Builders Claspo – Popups, Spin the Wheel & Email Capture claspo allows Exploiting Incorrectly Configured Access Control SecurityCheck if you run itEPSS 0.25%Dec 24, 2025
- High7.2Deserialization of Untrusted Data vulnerability in Icegram Icegram Express Pro email-subscribers-premium allows Object Injection.This issue affects Icegram Express Pro: from n/a thCheck if you run itEPSS 0.45%Dec 24, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AMP-MODE Review Disclaimer review-disclaimer allows Stored XSS.This issue affeCheck this weekEPSS 21.00%Dec 24, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF of alloc->vma in race with munmap() [ cmllamas: clean forward port from commit 015ac18be7de ("biCheck if you run itEPSS 0.15%Dec 24, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: sfc: fix crash when reading stats while NIC is resetting efx_net_stats() (.ndo_get_stats64) can be called duringCheck if you run itEPSS 0.22%Dec 24, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ext4: turn quotas off if mount failed after enabling quotas Yi found during a review of the patch "ext4: don't BCheck if you run itEPSS 0.17%Dec 24, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Move representor neigh cleanup to profile cleanup_tx For IP tunnel encapsulation in ECMP (Equal-CostCheck if you run itEPSS 0.20%Dec 24, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: erofs: stop parsing non-compact HEAD index if clusterofs is invalid Syzbot generated a crafted image [1] with aCheck if you run itEPSS 0.18%Dec 24, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling Commit 55d1cbbbb29e ("hfs/hfsplus: useCheck if you run itEPSS 0.17%Dec 24, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Add validation for lmac type Upon physical link change, firmware reports to the kernel about the cCheck if you run itEPSS 0.29%Dec 24, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: fs: drop peer group ids under namespace lock When cleaning up peer group ids in the failure path we need to makeCheck if you run itEPSS 0.17%Dec 24, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() Syzkaller reported the following issue: ==Check if you run itEPSS 0.16%Dec 24, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Return error for inconsistent extended attributes ntfs_read_ea is called when we want to read extendedCheck if you run itEPSS 0.16%Dec 24, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests The following message and call trace was seen with debCheck if you run itEPSS 0.21%Dec 24, 2025
Sort