Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3XWiki xwiki Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 80.01%Apr 23, 2025
- High8.6XWiki is a generic wiki platform.Check if you run itEPSS 0.59%Apr 23, 2025
- Critical9.3This vulnerability exists in Meon Bidding Solutions due to improper authorization controls on certain API endpoints for the initiation, modification, or cancellation operations.Check if you run itEPSS 0.49%Apr 23, 2025
- Medium6.9This vulnerability exists in Meon KYC solutions due to debug mode is enabled in certain API endpoints.Check if you run itEPSS 0.49%Apr 23, 2025
- High8.7This vulnerability exists in the Meon KYC solutions due to transmission of sensitive data in plain text within the response payloads of certain API endpoints.Check if you run itEPSS 0.33%Apr 23, 2025
- High8.2This vulnerability exists in Meon KYC solutions due to improper handling of access and refresh tokens in certain API endpoints of authentication process.Check if you run itEPSS 0.43%Apr 23, 2025
- High8.2This vulnerability exists in Meon KYC solutions due to insufficient server-side validation of the Captcha in certain API endpoints.Check if you run itEPSS 0.43%Apr 23, 2025
- High8.2This vulnerability exists in Meon KYC solutions due to missing restrictions on the number of incorrect One-Time Password (OTP) attempts through certain API endpoints of login proceCheck if you run itEPSS 0.46%Apr 23, 2025
- High7.5The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to product price manipulation in all versions up to, and including, 5.1.2.Check if you run itEPSS 0.54%Apr 23, 2025
- Medium5.8A directory traversal vulnerability exists in Ivanti LANDesk Management Gateway through 4.2-1.9.Check if you run itEPSS 1.47%Apr 23, 2025
- High7.3TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulCheck if you run itEPSS 0.40%Apr 23, 2025
- High7.3TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulCheck if you run itEPSS 0.40%Apr 23, 2025
- High7.3TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter.Check if you run itEPSS 0.40%Apr 23, 2025
- High7.3TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the downloadFile.cgi through the v14 and v3 parametersCheck if you run itEPSS 0.40%Apr 23, 2025
- High7.3TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter.Check if you run itEPSS 0.40%Apr 23, 2025
- High7.3TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi componentCheck if you run itEPSS 0.49%Apr 23, 2025
- High7.3TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter.Check if you run itEPSS 0.43%Apr 23, 2025
- Low2.5In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terCheck if you run itEPSS 0.18%Apr 23, 2025
- Unknownicegram email_subscribers_\&_newsletters Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 10.16%Apr 23, 2025
- Critical9.3xrpl.js is a JavaScript/TypeScript API for interacting with the XRP Ledger in Node.js and the browser.Check if you run itEPSS 0.92%Apr 22, 2025
- Low2.5NVIDIA NvContainer service for Windows contains a vulnerability in its usage of OpenSSL, where an attacker could exploit a hard-coded constant issue by copying a malicious DLL in aCheck if you run itEPSS 0.17%Apr 22, 2025
- Medium4.6SAP Learning Solution is vulnerable to Cross-Site Request Forgery (CSRF), allowing an attacker to trick authenticated user into sending unintended requests to the server.Check if you run itEPSS 0.14%Apr 22, 2025
- Medium4.3SAP Field Logistics Manage Logistics application OData meta-data property is vulnerable to data tampering, due to which certain fields could be externally modified by an attacker cCheck if you run itEPSS 0.28%Apr 22, 2025
- Medium4.3OctoPrint provides a web interface for controlling consumer 3D printers.Check if you run itEPSS 0.25%Apr 22, 2025
- High7.6NVIDIA NeMo Framework contains a vulnerability where a user could cause an improper control of generation of code by remote code execution.Check if you run itEPSS 0.70%Apr 22, 2025
Sort