Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A vulnerability was found in PHPGurukul Boat Booking System 1.0 and classified as critical.Check if you run itEPSS 0.46%May 1, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in PHPGurukul Pre-School Enrollment System 1.0.Check if you run itEPSS 0.46%May 1, 2025
- Medium6.9A vulnerability classified as critical has been found in PHPGurukul Online Birth Certificate System 1.0.Check if you run itEPSS 0.36%May 1, 2025
- Medium6.9A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0.Check if you run itEPSS 0.56%May 1, 2025
- Medium5.3PKCE was implemented in the OAuth implementation in workers-oauth-provider that is part of MCP framework https://github.com/cloudflare/workers-mcp .Check if you run itEPSS 0.57%May 1, 2025
- Medium6.0The OAuth implementation in workers-oauth-provider that is part of MCP framework https://github.com/cloudflare/workers-mcp , did not correctly validate that redirect_uri was on theCheck if you run itEPSS 0.32%May 1, 2025
- High7.3Lack of input validation/sanitization in the 'ate' management service in the Tenda RX2 Pro 16.03.30.14 allows an unauthorized remote attacker to gain root shell access to the devicCheck if you run itEPSS 1.00%May 1, 2025
- High8.2Use of weak credentials in the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated attacker to authenticate to the telnet service by calculating the root password based on easily-oCheck if you run itEPSS 0.43%May 1, 2025
- High8.8Lack of input validation/sanitization in the 'setLanCfg' API endpoint in httpd in the Tenda RX2 Pro 16.03.30.14 allows a remote attacker that is authorized to the web management poCheck if you run itEPSS 0.85%May 1, 2025
- Medium6.3Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetNetCheckTools function via the hostName parameter.Check if you run itEPSS 1.18%May 1, 2025
- Medium6.3Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the level parameter.Check if you run itEPSS 1.17%May 1, 2025
- Medium6.3Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the enable parameter.Check if you run itEPSS 1.17%May 1, 2025
- Medium6.3Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the module parameter.Check if you run itEPSS 1.17%May 1, 2025
- Medium6.5TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the msg_process function via the Url parameter.Check if you run itEPSS 0.87%May 1, 2025
- Medium6.3TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the recvUpgradeNewFw function via the fwUrl parameter.Check if you run itEPSS 0.94%May 1, 2025
- Medium6.3TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url parameter.Check if you run itEPSS 0.94%May 1, 2025
- Medium6.5TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the msg_process function via the Port parameter.Check if you run itEPSS 0.87%May 1, 2025
- Medium6.3TOTOLINK CP900 V6.3c.1144_B20190715 was found to contain a command injection vulnerability in the setUpgradeUboot function via the FileName parameter.Check if you run itEPSS 0.94%May 1, 2025
- Medium6.3TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter.Check if you run itEPSS 0.94%May 1, 2025
- Medium6.3TOTOLINK ca600-poe_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 0.94%May 1, 2025
- Medium6.3TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the setUploadUserData function via the FileName parameter.Check if you run itEPSS 0.94%May 1, 2025
- Medium6.3TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url or magicid parameters.Check if you run itEPSS 0.94%May 1, 2025
- Medium6.3TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the setApRebootScheCfg function via the hour or minute parameters.Check if you run itEPSS 0.94%May 1, 2025
- Medium6.3D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in iptablesWebsFilterRun, which allows remote attackers to execute arbitrary commands via shell.Check if you run itEPSS 1.11%May 1, 2025
- Medium4.0An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.Check if you run itEPSS 0.15%May 1, 2025
Sort