Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7COMMAX WebViewer ActiveX Control 2.1.4.5 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by providing excessively long string arrays througCheck if you run itEPSS 0.49%Dec 9, 2025
- High8.7OpenBMCS 2.4 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive files by exploiting directory listing functionality.Check if you run itEPSS 0.55%Dec 9, 2025
- Medium6.9IntelliChoice eFORCE Software Suite 2.5.9 contains a username enumeration vulnerability that allows attackers to enumerate valid users by exploiting the 'ctl00$MainContent$UserNameCheck if you run itEPSS 0.36%Dec 9, 2025
- High8.7COMMAX Smart Home System is a smart IoT home solution that allows an unauthenticated attacker to disclose RTSP credentials in plain-text by exploiting the /overview.asp endpoint.Check if you run itEPSS 0.35%Dec 9, 2025
- Critical9.3COMMAX Smart Home System CDP-1020n contains an SQL injection vulnerability that allows attackers to bypass authentication by injecting arbitrary SQL code through the 'id' parameterCheck if you run itEPSS 0.53%Dec 9, 2025
- Critical9.3COMMAX CVD-Axx DVR 5.1.4 contains weak default administrative credentials that allow remote password attacks and disclose RTSP stream.Check if you run itEPSS 0.37%Dec 9, 2025
- High8.7COMMAX Biometric Access Control System 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access sensitive information and circumvent phCheck if you run itEPSS 0.55%Dec 9, 2025
- High8.7COMMAX UMS Client ActiveX Control 1.7.0.2 contains a heap-based buffer overflow vulnerability that allows attackers to execute arbitrary code by providing excessively long string aCheck if you run itEPSS 0.49%Dec 9, 2025
- High8.7OpenBMCS 2.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting arbitrary SQL code.Check if you run itEPSS 0.41%Dec 9, 2025
- Medium6.9OpenBMCS 2.4 contains an unauthenticated SSRF vulnerability that allows attackers to bypass firewalls and initiate service and network enumeration on the internal network through tCheck if you run itEPSS 0.32%Dec 9, 2025
- Medium5.3OpenBMCS 2.4 contains a CSRF vulnerability that allows attackers to perform actions with administrative privileges by exploiting the sendFeedback.php endpoint.Check if you run itEPSS 0.19%Dec 9, 2025
- High8.8SiYuan is self-hosted, open source personal knowledge management software.Check if you run itEPSS 0.44%Dec 9, 2025
- Low3.3Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulneraCheck if you run itEPSS 0.43%Dec 9, 2025
- Low3.3Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulneraCheck if you run itEPSS 0.45%Dec 9, 2025
- High8.1Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.Check if you run itEPSS 0.68%Dec 9, 2025
- Medium4.9Umbraco is an ASP.NET CMS.Check if you run itEPSS 0.36%Dec 9, 2025
- High7.5Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication.Check if you run itEPSS 0.81%Dec 9, 2025
- Critical9.1Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication.Check if you run itEPSS 0.56%Dec 9, 2025
- High8.8Ladybug adds message-based debugging, unit, system, and regression testing to Java applications.Check if you run itEPSS 0.33%Dec 9, 2025
- Critical9.3Emby Server is a user-installable home media server.Check if you run itEPSS 0.59%Dec 9, 2025
- Medium6.5An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on re-keying and stream flushing during device rebiCheck if you run itEPSS 0.13%Dec 9, 2025
- Medium4.8HP System Event Utility and Omen Gaming Hub might allow execution of certain files outside of their restricted paths.Check if you run itEPSS 0.40%Dec 9, 2025
- Critical9.3Entrust Instant Financial Issuance (IFI) On Premise software (formerly referred to as CardWizard) versions 5.x, prior to 6.10.5, and prior to 6.11.1 contain an insecure .NET RemotiCheck if you run itEPSS 0.95%Dec 9, 2025
- High7.1Legality WHISTLEBLOWING by DigitalPA contains a protection mechanism failure in which critical HTTP security headers are not emitted by default.Check if you run itEPSS 0.45%Dec 9, 2025
- High8.5MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.Check if you run itEPSS 0.19%Dec 9, 2025
Sort