Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the wifiOff parameter in the sub_4232EC function.Check if you run itEPSS 0.41%Oct 31, 2025
- High7.5Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the wifiOff parameter in the sub_421A04 function.Check if you run itEPSS 0.41%Oct 31, 2025
- High7.5Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the urldecode function.Check if you run itEPSS 0.41%Oct 31, 2025
- High7.5Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub_4222E0 function.Check if you run itEPSS 0.41%Oct 31, 2025
- High7.5Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub_421CF0 function.Check if you run itEPSS 0.41%Oct 31, 2025
- High7.5Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the form_fast_setting_wifi_set function.Check if you run itEPSS 0.40%Oct 31, 2025
- High7.5Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the deviceId parameter in the get_parentControl_list_Info function.Check if you run itEPSS 0.40%Oct 31, 2025
- Critical9.8Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader.Check if you run itEPSS 0.40%Oct 31, 2025
- High7.1Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader.Check if you run itEPSS 0.18%Oct 31, 2025
- Critical10.0Incorrect access control in the realtime.cgi endpoint of Deep Sea Electronics devices DSE855 v1.1.0 to v1.1.26 allows attackers to gain access to the admin panel and complete contrCheck if you run itEPSS 0.36%Oct 31, 2025
- UnknownJEECG jeecg Incorrect Permission Assignment for Critical ResourcePatch nowKEVEPSS 3.52%Oct 31, 2025
- Critical10.0A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution (RCE) on the Backup infrastructure hosts by an authenticated domain user.Check if you run itEPSS 0.85%Oct 30, 2025
- High8.8A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.Check if you run itEPSS 1.04%Oct 30, 2025
- High7.3A vulnerability was identified in certain UniFi Talk devices where internal debugging functionality remained unintentionally enabled.Check if you run itEPSS 0.24%Oct 30, 2025
- Critical9.4Nagios XI versions prior to 2024R1 contain a missing access control vulnerability via the Web SSH Terminal.Check if you run itEPSS 1.66%Oct 30, 2025
- Medium6.9Nagios XI versions prior to 5.6.11 contain unauthenticated vulnerabilities in the Highcharts local exporting tool.Check if you run itEPSS 0.63%Oct 30, 2025
- High8.7Nagios XI versions prior to 5.7.5 contain a SQL injection vulnerability in the SNMP Trap Interface edit page.Check if you run itEPSS 1.97%Oct 30, 2025
- High8.7Nagios XI versions prior to 5.2.4 contain a SQL injection vulnerability in the notification search functionality.Check if you run itEPSS 1.11%Oct 30, 2025
- Critical9.2Nagios XI versions prior to 2024R1.1.3 did not invalidate all other active sessions for a user when that user's password was changed.Check if you run itEPSS 1.06%Oct 30, 2025
- Medium5.1Nagios XI versions prior to 2012R1.6 contain a reflected cross-site scripting (XSS) vulnerability in the dashboard dashlet AJAX load functionality.Check if you run itEPSS 0.56%Oct 30, 2025
- Critical9.4Nagios XI versions prior to 2024R1.3.2 contain a remote command execution vulnerability in the WinRM Configuration Wizard.Check if you run itEPSS 2.40%Oct 30, 2025
- Critical9.4Nagios XI versions prior to 2026R1 contain a remote code execution vulnerability in the Core Config Manager (CCM) Run Check command.Check if you run itEPSS 2.40%Oct 30, 2025
- Critical9.4Nagios XI versions prior to 2024R1.4.2 contain a remote code execution vulnerability in the Business Process Intelligence (BPI) component.Check if you run itEPSS 2.40%Oct 30, 2025
- High7.3Nagios XI versions prior to 2011R1.9 contain privilege escalation vulnerabilities in the scripts that install or update system crontab entries.Check if you run itEPSS 0.23%Oct 30, 2025
- Critical9.4Nagios XI versions prior to 2024R1.0.1 contain a privilege escalation vulnerability in the System Profile component.Check if you run itEPSS 1.21%Oct 30, 2025
Sort