Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5ipmi-oem in FreeIPMI before 1.6.17 has exploitable buffer overflows on response messages.Check if you run itEPSS 0.40%Mar 24, 2026
- Medium6.5SQL injection in Solicitante::resetaSenha() in esiclivre/esiclivre v0.2.2 and earlier allows unauthenticated remote attackers to gain unauthorized access to sensitive…Check if you run itEPSS 0.38%Mar 24, 2026
- Medium5.3NGINX Plus and NGINX Open Source have a vulnerability in the ngx_stream_ssl_module module due to the improper handling of revoked certificates when configured with the…Check if you run itEPSS 0.15%Mar 24, 2026
- Medium4.7DiceBear is an avatar library for designers and developers.Check if you run itEPSS 0.21%Mar 24, 2026
- High7.1Meeplace Business Review Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious c…Check if you run itEPSS 0.30%Mar 24, 2026
- High8.6X-NetStat Pro 5.63 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the EIP register through a 264-b…Check if you run itEPSS 0.19%Mar 24, 2026
- Medium5.9Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS.Check if you run itEPSS 0.24%Mar 24, 2026
- High7.5Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS.Check if you run itEPSS 0.31%Mar 24, 2026
- Medium5.3Active Storage allows users to attach cloud and local files in Rails applications.Check if you run itEPSS 0.39%Mar 24, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.27%Mar 23, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.43%Mar 23, 2026
- High8.5Improper input handling in a modem-management administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of…Check if you run itEPSS 0.65%Mar 23, 2026
- High8.5Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of…Check if you run itEPSS 0.65%Mar 23, 2026
- Medium6.1WWBN AVideo is an open source video platform.Check if you run itEPSS 0.27%Mar 23, 2026
- Low2.9A security vulnerability has been detected in kalcaddle kodbox 1.64.Check if you run itEPSS 0.55%Mar 23, 2026
- Critical9.3SQL injection vulnerability in Sinturno.Check if you run itEPSS 0.25%Mar 23, 2026
- Medium6.3A vulnerability was found in HybridAuth up to 3.12.2.Check if you run itEPSS 0.26%Mar 23, 2026
- High8.7Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services.Check if you run itEPSS 0.27%Mar 23, 2026
- Critical10.0An unauthenticated remote attacker can exploit a hidden function in the CLI prompt to escape the restricted interface, leading to full compromise of the device.Check if you run itEPSS 0.65%Mar 23, 2026
- High7.4A vulnerability was found in Tenda F453 1.0.0.3.Check if you run itEPSS 1.01%Mar 22, 2026
- High8.5Admin Express 1.2.5.485 contains a local structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying…Check if you run itEPSS 0.15%Mar 22, 2026
- Medium6.8Fast AVI MPEG Joiner 1.2.0812 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload in the Li…Check if you run itEPSS 0.14%Mar 22, 2026
- Medium6.8GSearch 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by inputting an excessively long string in the search bar.Check if you run itEPSS 0.11%Mar 22, 2026
- High7.1UltraVNC Viewer 1.2.2.4 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized string to the VNC Server input field.Check if you run itEPSS 0.70%Mar 22, 2026
- Medium6.8jetCast Server 2.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Log d…Check if you run itEPSS 0.17%Mar 22, 2026