Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3xrdp is an open source RDP server.Check if you run itEPSS 0.36%Apr 17, 2026
- Critical9.4Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package.Check if you run itEPSS 0.92%Apr 17, 2026
- High7.5Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POST requests that modify debug settings (e.g., enabling SSH), allowing unauthorized state changes that can fa…Check if you run itEPSS 0.29%Apr 17, 2026
- High8.1Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt a…Check if you run itEPSS 0.23%Apr 17, 2026
- Critical9.9Firebird is an open-source relational database management system.Check if you run itEPSS 0.69%Apr 17, 2026
- High7.6WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.20%Apr 17, 2026
- High8.8Anviz CX2 Lite and CX7 are vulnerable to unverified update packages that can be uploaded.Check if you run itEPSS 0.41%Apr 17, 2026
- High8.8Anviz CX2 Lite is vulnerable to an authenticated command injection via a filename parameter that enables arbitrary command execution (e.g., starting telnetd), resultin…Check if you run itEPSS 1.79%Apr 17, 2026
- Critical9.8Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads.Check if you run itEPSS 0.59%Apr 17, 2026
- High7.5Firebird is an open-source relational database management system.Check if you run itEPSS 0.47%Apr 17, 2026
- Medium5.3Anviz CX7 Firmware is vulnerable to the most recently captured test photo that can be retrieved without authentication, revealing sensitive operational imagery.Check if you run itEPSS 0.30%Apr 17, 2026
- High7.5Firebird is an open-source relational database management system.Check if you run itEPSS 0.47%Apr 17, 2026
- Medium6.5Anviz CX2 Lite and CX7 administrative sessions occur over HTTP, enabling on‑path attackers to sniff credentials and session data, which can be used to compromise the device.Check if you run itEPSS 0.19%Apr 17, 2026
- High7.7xrdp is an open source RDP server.Check if you run itEPSS 0.43%Apr 17, 2026
- Medium5.3Anviz CX7 Firmware is vulnerable to an unauthenticated POST to the device that captures a photo with the front facing camera, exposing visual information about the dep…Check if you run itEPSS 0.25%Apr 17, 2026
- High7.5Anviz CrossChex Standard is vulnerable when an attacker manipulates the TDS7 PreLogin to disable encryption, causing database credentials to be sent in plaintext and e…Check if you run itEPSS 0.21%Apr 17, 2026
- Medium5.3Anviz CX2 Lite and CX7 are vulnerable to unauthenticated access that discloses debug configuration details (e.g., SSH/RTTY status), assisting attackers in reconnaissan…Check if you run itEPSS 0.25%Apr 17, 2026
- Medium6.3xrdp is an open source RDP server.Check if you run itEPSS 0.41%Apr 17, 2026
- High7.7xrdp is an open source RDP server.Check if you run itEPSS 0.54%Apr 17, 2026
- High7.7Anviz CX7 Firmware is vulnerable because the application embeds reusable certificate/key material, enabling decryption of MQTT traffic and potential interaction with d…Check if you run itEPSS 0.09%Apr 17, 2026
- High8.8xrdp is an open source RDP server.Check if you run itEPSS 0.16%Apr 17, 2026
- Critical9.3xrdp is an open source RDP server.Check if you run itEPSS 0.17%Apr 17, 2026
- Medium4.9Anviz CX7 Firmware is vulnerable to an authenticated CSV upload which allows path traversal to overwrite arbitrary files (e.g., /etc/shadow), enabling unauthorized SSH…Check if you run itEPSS 0.35%Apr 17, 2026
- Medium6.9Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver (aws-efs-csi-driver) before v3.0.1 allows remote authenticated us…Check if you run itEPSS 0.56%Apr 17, 2026
- Critical9.1OpenViking prior to version 0.3.9 contains an authentication bypass vulnerability in the VikingBot OpenAPI HTTP route surface where the authentication check fails open…Check if you run itEPSS 0.57%Apr 17, 2026
Sort