Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.0A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network…Check if you run itEPSS 0.18%Apr 13, 2026
- Medium4.0A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows administrator to disable the agent.Check if you run itEPSS 0.15%Apr 13, 2026
- High7.4A flaw has been found in TOTOLINK A7000R up to 9.1.0u.6115.Check if you run itEPSS 0.57%Apr 13, 2026
- Medium5.5A vulnerability was detected in code-projects Faculty Management System 1.0.Check if you run itEPSS 0.25%Apr 13, 2026
- Medium5.5A security vulnerability has been detected in code-projects Vehicle Showroom Management System 1.0.Check if you run itEPSS 0.25%Apr 13, 2026
- Critical9.8An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests to arbitrary destinations.Check if you run itEPSS 0.19%Apr 13, 2026
- Critical9.1Solstice::Session versions through 1440 for Perl generates session ids insecurely.Check if you run itEPSS 0.34%Apr 13, 2026
- High7.5The ZTE ZXEDM iEMS product has a password reset vulnerability for any user.Because the management of the cloud EMS portal does not properly control access to the user…Check if you run itEPSS 0.19%Apr 13, 2026
- High8.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.36%Apr 13, 2026
- Medium5.1Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.Check if you run itEPSS 0.08%Apr 13, 2026
- Critical10.0Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.Check if you run itEPSS 0.21%Apr 13, 2026
- Medium6.8The Form Maker by 10Web WordPress plugin before 1.15.38 does not properly prepare SQL queries when the "MySQL Mapping" feature is in use, which could make SQL Injectio…Check if you run itEPSS 0.27%Apr 13, 2026
- Medium5.5A weakness has been identified in code-projects Vehicle Showroom Management System 1.0.Check if you run itEPSS 0.25%Apr 13, 2026
- Medium5.5A security flaw has been discovered in code-projects Lost and Found Thing Management 1.0.Check if you run itEPSS 0.25%Apr 13, 2026
- Medium5.5A vulnerability was identified in code-projects Lost and Found Thing Management 1.0.Check if you run itEPSS 0.32%Apr 13, 2026
- High7.5Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined behavior.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.Check if you run itEPSS 0.17%Apr 13, 2026
- Medium5.1Improper access control in Samsung Camera prior to version 16.5.00.28 allows local attacker to access location data.Check if you run itEPSS 0.08%Apr 13, 2026
- Medium6.9Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to access sensitive information.Check if you run itEPSS 0.09%Apr 13, 2026
- Medium6.8External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows privileged local attacker to create file with system privilege.Check if you run itEPSS 0.09%Apr 13, 2026
- Medium5.4Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock.Check if you run itEPSS 0.15%Apr 13, 2026
- High7.8Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions.Check if you run itEPSS 0.10%Apr 13, 2026
- Medium4.1Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass App Pinning.Check if you run itEPSS 0.23%Apr 13, 2026
- Medium5.1Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to access sensitive information.Check if you run itEPSS 0.16%Apr 13, 2026
- Medium4.4Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Knox Guard.Check if you run itEPSS 0.16%Apr 13, 2026
- Medium4.7Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents.Check if you run itEPSS 0.13%Apr 13, 2026
Sort