Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A vulnerability was identified in Totolink WA300 5.2cu.7112_B20190227.Check if you run itEPSS 1.01%May 4, 2026
- High7.4A vulnerability was determined in Totolink WA300 5.2cu.7112_B20190227.Check if you run itEPSS 0.47%May 4, 2026
- Low2.1A vulnerability was found in code-projects Gym Management System In PHP and Windows NT 1.0.Check if you run itEPSS 0.19%May 4, 2026
- Low2.1A vulnerability has been found in ravenwits mcp-server-arangodb up to 0.4.7.Check if you run itEPSS 0.29%May 4, 2026
- Medium5.5A flaw has been found in crocodilestick Calibre-Web-Automated up to 4.0.6.Check if you run itEPSS 0.46%May 4, 2026
- Critical9.0A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2.Check if you run itEPSS 0.47%May 4, 2026
- Medium6.1Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10.Check if you run itEPSS 0.21%May 4, 2026
- Critical9.3An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device Utility 9.0.5.Check if you run itEPSS 0.22%May 4, 2026
- Critical9.8A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2.Check if you run itEPSS 0.55%May 4, 2026
- Critical10.0GV-VMS V20 is a Video Monitoring Software used to gather the feeds of many surveillance cameras and manage other security devices.Check if you run itEPSS 0.54%May 4, 2026
- Critical9.9A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10.Check if you run itEPSS 0.36%May 4, 2026
- Medium6.5A privilege escalation vulnerability exists in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10.Check if you run itEPSS 0.28%May 4, 2026
- Medium6.1Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10.Check if you run itEPSS 0.21%May 4, 2026
- High7.5A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10.Check if you run itEPSS 0.34%May 4, 2026
- High8.8An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10.Check if you run itEPSS 1.68%May 4, 2026
- Low2.1A vulnerability was detected in crocodilestick Calibre-Web-Automated up to 4.0.6.Check if you run itEPSS 0.27%May 4, 2026
- Low2.1A security vulnerability has been detected in MindsDB up to 26.01.Check if you run itEPSS 0.30%May 4, 2026
- Medium5.5A weakness has been identified in MindsDB up to 26.01.Check if you run itEPSS 0.28%May 4, 2026
- Medium5.5A security flaw has been discovered in YunaiV yudao-cloud up to 3.8.0.Check if you run itEPSS 0.40%May 4, 2026
- Medium4.9Velociraptor versions prior to 0.76.4 contain a resource exhaustion vulnerability in the server's agent control channel.Check if you run itEPSS 0.34%May 4, 2026
- Unknownsitesao dhvc_form Incorrect Privilege AssignmentPatch nowKEVEPSS 0.55%May 4, 2026
- Unknownays-pro quiz_maker Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 11.76%May 4, 2026
- Unknownicegram icegram_express Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.45%May 4, 2026
- Unknownweb-shop-host startklar_elmentor_addons Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.52%May 4, 2026
- Unknownwppa wp_photo_album_plus Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.86%May 4, 2026
Sort