Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5An issue was discovered in MariaDB MCP 0.1.0 allowing attackers to gain sensitive information via the SSE service as the SSE service lacks user validation.Check if you run itEPSS 0.34%Sep 10, 2025
- High8.4Intelbras IWR 3000N 1.9.8 exposes the Wi-Fi password in plaintext via the /api/wireless endpoint.Check if you run itEPSS 3.49%Sep 10, 2025
- High7.8The eudskacs.sys driver version 20250328 shipped with EaseUs Todo Backup 1.2.0.1 fails to properly validate privileges for I/O requests (IRP_MJ_READ/IRP_MJ_WRITE) sent to its devicCheck if you run itEPSS 0.13%Sep 10, 2025
- High7.0PyInstaller bundles a Python application and all its dependencies into a single package.Check if you run itEPSS 0.13%Sep 9, 2025
- Critical9.3Prebid Universal Creative (PUC) is a JavaScript API to render multiple formats.Check if you run itEPSS 0.34%Sep 9, 2025
- High8.6Prebid.js is a free and open source library for publishers to quickly implement header bidding.Check if you run itEPSS 0.35%Sep 9, 2025
- Medium5.3Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access.Check if you run itEPSS 0.26%Sep 9, 2025
- Medium4.3Incorrect authorization in certain Zoom Workplace Clients for Windows may allow an authenticated user to conduct an impact to integrity via network access.Check if you run itEPSS 0.21%Sep 9, 2025
- Medium4.3Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.Check if you run itEPSS 0.31%Sep 9, 2025
- Medium4.3Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.Check if you run itEPSS 0.27%Sep 9, 2025
- Medium6.5Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network access.Check if you run itEPSS 0.32%Sep 9, 2025
- High7.2Tautulli is a Python based monitoring and tracking tool for Plex Media Server.Check if you run itEPSS 1.68%Sep 9, 2025
- Medium5.8CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause command injection in BLMon that is executedCheck if you run itEPSS 0.49%Sep 9, 2025
- Medium5.8CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause the execution of any shell command when exeCheck if you run itEPSS 0.52%Sep 9, 2025
- High8.7A weakness has been identified in UTT 1200GW up to 3.0.0-170831.Check if you run itEPSS 7.36%Sep 9, 2025
- Critical9.8An authentication bypass vulnerability allows remote attackers to gain administrative privileges on Sophos AP6 Series Wireless Access Points older than firmware version 1.7.2563 (MCheck if you run itEPSS 0.91%Sep 9, 2025
- High7.5Tautulli is a Python based monitoring and tracking tool for Plex Media Server.Check if you run itEPSS 0.68%Sep 9, 2025
- Critical9.1Tautulli is a Python based monitoring and tracking tool for Plex Media Server.Check if you run itEPSS 0.82%Sep 9, 2025
- High8.6Tautulli is a Python based monitoring and tracking tool for Plex Media Server.Check if you run itEPSS 0.64%Sep 9, 2025
- Medium5.1TinyEnv is an environment variable loader for PHP applications.Check if you run itEPSS 0.21%Sep 9, 2025
- Medium5.3Saleor is an e-commerce platform.Check if you run itEPSS 0.31%Sep 9, 2025
- Medium4.1Open OnDemand is an open-source HPC portal.Check if you run itEPSS 0.27%Sep 9, 2025
- High8.6listmonk is a standalone, self-hosted, newsletter and mailing list manager.Check if you run itEPSS 0.14%Sep 9, 2025
- High7.5OctoPrint provides a web interface for controlling consumer 3D printers.Check this weekEPSS 22.14%Sep 9, 2025
- Medium4.3IBM Jazz for Service Management 1.1.3.0 through 1.1.3.24 does not set the secure attribute on authorization tokens or session cookies.Check if you run itEPSS 0.18%Sep 9, 2025
Sort