Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8In Developer Tools, there is a possible missing verification incorrect input.Check if you run itEPSS 0.28%Aug 18, 2025
- High8.4In engineer mode service, there is a possible command injection due to improper input validation.Check if you run itEPSS 0.73%Aug 18, 2025
- Critical9.8TOTOLINK-A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability in the devicemac parameter in the formMapDel endpoint.Check if you run itEPSS 7.75%Aug 18, 2025
- Medium6.5TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an command injection vulnerability via the component bupload.html.Check if you run itEPSS 0.82%Aug 18, 2025
- Medium6.5TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain multiple OS command injection vulnerabilities via the macstr, bandstr, and clientoff parameters at /boafrm/formMapDeCheck if you run itEPSS 1.05%Aug 18, 2025
- High7.5TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the fw_ip parameter at /boafrm/formPortFw.Check if you run itEPSS 0.40%Aug 18, 2025
- High7.5TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the hostname parameter at /boafrm/formMapDelDevice.Check if you run itEPSS 0.40%Aug 18, 2025
- High7.5TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the url parameter at /boafrm/formFilter.Check if you run itEPSS 0.40%Aug 18, 2025
- Medium6.5TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an eval injection vulnerability via the eval() function.Check if you run itEPSS 0.25%Aug 18, 2025
- Medium5.3TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain insecure credentials for the telnet service and root account.Check if you run itEPSS 0.29%Aug 18, 2025
- Unknowngurock testrail Direct Request ('Forced Browsing')Patch nowKEVEPSS 47.49%Aug 18, 2025
- Medium5.3A vulnerability was detected in ThingsBoard 4.1.Check if you run itEPSS 0.31%Aug 17, 2025
- Unknownossrs simple_realtime_server Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 8.69%Aug 17, 2025
- UnknownExtensive VC Addons for WPBakery Php Extract Function Unauthenticated RCEPatch nowKEVEPSS 55.46%Aug 17, 2025
- Critical9.4In the Linux kernel, the following vulnerability has been resolved: mptcp: plug races between subflow fail and subflow creation We have races similar to the one addressed by the prCheck if you run itEPSS 0.33%Aug 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: hwmon: (corsair-cpro) Validate the size of the received input buffer Add buffer_recv_size to store the size of tCheck if you run itEPSS 0.17%Aug 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: avoid bluetooth suspend/resume stalls Ensure we don't stall or panic the kernel when…Check if you run itEPSS 0.20%Aug 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: netfs: Fix copy-to-cache so that it performs collection with ceph+fscache The netfs copy-to-cache that is used bCheck if you run itEPSS 0.13%Aug 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: iio: common: st_sensors: Fix use of uninitialize device structs Throughout the various probe functions &indio_deCheck if you run itEPSS 0.17%Aug 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: comedi: aio_iiro_16: Fix bit shift out of bounds When checking for a supported IRQ number, the following test isCheck if you run itEPSS 0.18%Aug 16, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifs_oplock_break A race condition can occur in cifs_oplock_break() leading tCheck if you run itEPSS 0.43%Aug 16, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix recv-recv race of completed call If a call receives an event (such as incoming data), the call gets pCheck if you run itEPSS 0.27%Aug 16, 2025
- Medium6.5The The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to arbitrary shortcCheck if you run itEPSS 0.44%Aug 16, 2025
- High8.8The Soledad theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 8.6.7 via the 'header_layout' parameter.Check if you run itEPSS 0.51%Aug 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix kernel crash when hard resetting the GPU The GPU hard reset sequence calls pm_runtime_forceCheck if you run itEPSS 0.16%Aug 16, 2025
Sort