Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the pppoeMtu parameter to /cgi-bin/cstecgi.cgi.Check if you run itEPSS 0.28%Apr 23, 2026
- Medium6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the provider parameter to /cgi-bin/cstecgi.cgi.Check if you run itEPSS 0.28%Apr 23, 2026
- Medium6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the password parameter to /cgi-bin/cstecgi.cgi.Check if you run itEPSS 0.28%Apr 23, 2026
- Medium6.0DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG.Check if you run itEPSS 0.31%Apr 23, 2026
- Medium6.8DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG.Check if you run itEPSS 0.25%Apr 23, 2026
- Medium6.9DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG.Check if you run itEPSS 0.27%Apr 23, 2026
- Medium6.4ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push endpoint URLs.Check if you run itEPSS 0.27%Apr 23, 2026
- High7.8A flaw was found in the X.Org X server's XKB key types request validation.Check if you run itEPSS 0.25%Apr 23, 2026
- High7.8A flaw was found in the X.Org X server.Check if you run itEPSS 0.26%Apr 23, 2026
- High7.8A flaw was found in the X.Org X server.Check if you run itEPSS 0.38%Apr 23, 2026
- Critical9.3Kofax Capture, now referred to as Tungsten Capture, version 6.0.0.0 (other versions may be affected) exposes a deprecated .NET Remoting HTTP channel on port 2424 via t…Check if you run itEPSS 0.88%Apr 23, 2026
- Critical9.8Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents.Check if you run itEPSS 0.70%Apr 23, 2026
- Critical9.8Jizhicms v2.5.4 is vulnerable to SQL injection in the product editing module.Check if you run itEPSS 0.36%Apr 23, 2026
- Medium6.3SocialEngine versions 7.8.0 and prior contain a blind server-side request forgery vulnerability in the /core/link/preview endpoint where user-supplied input passed via…Check if you run itEPSS 0.30%Apr 23, 2026
- Critical9.3SocialEngine versions 7.8.0 and prior contain a SQL injection vulnerability in the /activity/index/get-memberall endpoint where user-supplied input passed via the text…Check if you run itEPSS 0.97%Apr 23, 2026
- High8.7An unauthenticated remote attacker is able to exhaust all available TCP connections in the CODESYS EtherNet/IP adapter stack, preventing legitimate clients from establ…Check if you run itEPSS 0.41%Apr 23, 2026
- High7.3Yadea T5 Electric Bicycles (models manufactured in/after 2024) have a weak authentication mechanism in their keyless entry system.Check if you run itEPSS 0.27%Apr 23, 2026
- Critical9.9Improper Control of Generation of Code ('Code Injection') vulnerability in Funnelforms LLC FunnelFormsPro allows Remote Code Inclusion.This issue affects FunnelFormsPr…Check if you run itEPSS 0.36%Apr 23, 2026
- Medium4.7An API design flaw in WebKitGTK and WPE WebKit allows untrusted web content to unexpectedly perform IP connections, DNS lookups, and HTTP requests.Check if you run itEPSS 0.23%Apr 23, 2026
- Medium5.7Multiple uses of uninitialized variables were found in libopensc that may lead to information disclosure or application crash.Check if you run itEPSS 0.27%Apr 23, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: can: raw: fix ro->uniq use-after-free in raw_rcv() raw_release() unregisters raw CAN receive filter…Check if you run itEPSS 0.17%Apr 23, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() When querying a nexthop object via RTM…Check if you run itEPSS 0.17%Apr 23, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc.Check if you run itEPSS 0.17%Apr 23, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rescue Themes Rescue Shortcodes allows Stored XSS.This issue affe…Check if you run itEPSS 0.13%Apr 23, 2026
- Medium4.3Missing Authorization vulnerability in Navneil Naicker ACF Galerie 4 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ACF Gal…Check if you run itEPSS 0.20%Apr 23, 2026
Sort