Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.6NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory by an arbitrary file write.Check if you run itEPSS 0.64%Apr 22, 2025
- High7.6NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution.Check if you run itEPSS 0.69%Apr 22, 2025
- Medium5.3Missing Authorization vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar allows Accessing Functionality Not Properly Constrained by ACLs.This issCheck if you run itEPSS 0.40%Apr 22, 2025
- Medium4.3Missing Authorization vulnerability in alttextai Download Alt Text AI alttext-ai allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DownloadCheck if you run itEPSS 0.29%Apr 22, 2025
- High7.0An authorization bypass in Unblu Spark allows a participant of a conversation to replace an existing, uploaded file.Check if you run itEPSS 0.30%Apr 22, 2025
- High7.1The Front End Users WordPress plugin through 3.2.32 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting whicCheck if you run itEPSS 0.55%Apr 22, 2025
- High7.1Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF contains an authentication credentials leakage vulnerability.This issue affects Hitachi Ops CentCheck if you run itEPSS 0.31%Apr 22, 2025
- Medium5.5Hitachi Ops Center Common Services within Hitachi Ops Center OVA contains an information exposure vulnerability.Check if you run itEPSS 0.17%Apr 22, 2025
- High7.8An incorrect permission assignment vulnerability in the PostgreSQL commands of the Zyxel USG FLEX H series uOS firmware versions from V1.20 through V1.31 could allow an authenticatCheck if you run itEPSS 0.94%Apr 22, 2025
- Critical10.0SAP NetWeaver Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 99.49%Apr 22, 2025
- Medium6.5D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in /goform/delRouting.Check if you run itEPSS 1.02%Apr 22, 2025
- High7.3Francois Jacquet RosarioSIS v12.0.0 was discovered to contain a content spoofing vulnerability in the Theme configuration under the My Preferences module.Check if you run itEPSS 0.29%Apr 22, 2025
- High7.5An issue in UPF in Open5GS UPF versions up to v2.7.2 results an assertion failure vulnerability in PFCP session parameter validation.Check if you run itEPSS 0.79%Apr 22, 2025
- Critical9.8TOTOLINK EX1200T V4.1.2cu.5232_B20210713 was found to contain a pre-auth remote command execution vulnerability in the setUpgradeFW function through the FileName parameter.Check if you run itEPSS 1.23%Apr 22, 2025
- Critical9.8TOTOLINK EX1200T V4.1.2cu.5232_B20210713 was found to contain a pre-auth remote command execution vulnerability in the setWebWlanIdx function through the webWlanIdx parameter.Check if you run itEPSS 1.23%Apr 22, 2025
- Critical9.8TOTOLINK A810R V4.1.2cu.5182_B20201026 and A950RG V4.1.2cu.5161_B20200903 were found to contain a pre-auth remote command execution vulnerability in the setDiagnosisCfg function thCheck if you run itEPSS 1.23%Apr 22, 2025
- Critical9.8TOTOLINK a950rg_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.36%Apr 22, 2025
- Critical9.8TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.Check if you run itEPSS 1.36%Apr 22, 2025
- Critical9.8TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.Check if you run itEPSS 1.36%Apr 22, 2025
- High7.3TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.Check if you run itEPSS 0.40%Apr 22, 2025
- High7.3TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.Check if you run itEPSS 0.34%Apr 22, 2025
- Medium6.5TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a hardcoded password for the telnet service in product.ini.Check if you run itEPSS 0.30%Apr 22, 2025
- High8.8TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a stack overflow via the startTime and endTime parameters in setParentalRules function.Check if you run itEPSS 0.47%Apr 22, 2025
- High7.3TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulCheck if you run itEPSS 0.40%Apr 22, 2025
- High7.3TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 was found to contain a buffer overflow vulnCheck if you run itEPSS 0.40%Apr 22, 2025
Sort