Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1Cross Site Scripting vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a remote attacker to obtain sensitive information via the login.php component.Check if you run itEPSS 0.26%Dec 10, 2025
- High7.6Improper access control for volatile memory containing boot code in Universal Boot Loader (U-Boot) before 2017.11 and Qualcomm chips IPQ4019, IPQ5018, IPQ5322, IPQ6018, IPQ8064, IPCheck if you run itEPSS 0.27%Dec 10, 2025
- Critical9.4WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.Check if you run itEPSS 0.51%Dec 9, 2025
- High8.4ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could allow a high privileged attacker to gain arbitrary coCheck if you run itEPSS 4.71%Dec 9, 2025
- Medium5.3ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could result in limited unauthorized write accesCheck if you run itEPSS 0.44%Dec 9, 2025
- Critical9.1ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.66%Dec 9, 2025
- Medium5.6ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Access Control vulnerability.Check if you run itEPSS 0.13%Dec 9, 2025
- Medium6.6The CNI portmap plugin allows containers to emulate opening a host port, forwarding that traffic to the container.Check if you run itEPSS 0.14%Dec 9, 2025
- Medium5.4WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.Check if you run itEPSS 0.25%Dec 9, 2025
- Critical9.3ZITADEL is an open-source identity infrastructure tool.Check if you run itEPSS 0.44%Dec 9, 2025
- Medium4.3IBM Planning Analytics Local 2.1.0 - 2.1.15 could disclose sensitive information about server architecture that could aid in further attacks against the system.Check if you run itEPSS 0.21%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the WindowContext parameter of /Mondo/lang/sys/Forms/MAI/compose.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium6.9MiniDVBLinux 5.4 contains a remote code execution vulnerability in the SVDRP protocol that allows remote attackers to send commands to manipulate TV systems.Check if you run itEPSS 0.92%Dec 9, 2025
- High8.7MiniDVBLinux 5.4 contains an unauthenticated vulnerability in the tv_action.sh script that allows remote attackers to generate live stream snapshots through the Simple VDR ProtocolCheck if you run itEPSS 0.53%Dec 9, 2025
- High8.7MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter.Check if you run itEPSS 0.96%Dec 9, 2025
- Critical9.3MiniDVBLinux 5.4 contains an authentication bypass vulnerability that allows remote attackers to change the root password without authentication.Check if you run itEPSS 0.97%Dec 9, 2025
- High8.7MiniDVBLinux 5.4 contains an unauthenticated configuration download vulnerability that allows remote attackers to access sensitive system configuration files through a direct objecCheck if you run itEPSS 0.54%Dec 9, 2025
- Critical9.9Tinycontrol LAN Controller v3 LK3 version 1.58a contains an unauthenticated vulnerability that allows remote attackers to download configuration backup files containing sensitive cCheck if you run itEPSS 0.63%Dec 9, 2025
- Critical9.3Selea Targa IP OCR-ANPR Camera contains a hard-coded developer password vulnerability that allows unauthorized configuration access through an undocumented page.Check if you run itEPSS 0.52%Dec 9, 2025
- High8.5Selea Targa IP OCR-ANPR Camera contains a cross-site request forgery vulnerability that allows attackers to create administrative users without authentication.Check if you run itEPSS 0.25%Dec 9, 2025
- Medium5.1Selea Targa IP OCR-ANPR Camera contains a stored cross-site scripting vulnerability in the 'files_list' parameter that allows attackers to inject malicious HTML and script code.Check if you run itEPSS 0.30%Dec 9, 2025
- Critical9.3Selea Targa IP OCR-ANPR Camera contains an unauthenticated command injection vulnerability in utils.php that allows remote attackers to execute arbitrary shell commands.Check if you run itEPSS 2.62%Dec 9, 2025
- High8.7Selea Targa IP OCR-ANPR Camera contains an unauthenticated vulnerability that allows remote attackers to access live video streams without authentication.Check if you run itEPSS 0.47%Dec 9, 2025
- High7.1STVS ProVision 5.9.10 contains a path traversal vulnerability that allows authenticated attackers to access arbitrary files by manipulating the files parameter in the archive downlCheck if you run itEPSS 0.77%Dec 9, 2025
- Medium6.9STVS ProVision 5.9.10 contains a cross-site request forgery vulnerability that allows attackers to perform actions with administrative privileges by exploiting unvalidated HTTP reqCheck if you run itEPSS 0.20%Dec 9, 2025
Sort