Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9An unauthenticated attackers can obtain a list of smart devices by knowing a valid username through an unprotected API.Check if you run itEPSS 0.31%Apr 15, 2025
- Medium6.9An unauthenticated attacker can obtain EV charger version and firmware upgrading history by knowing the charger ID.Check if you run itEPSS 0.31%Apr 15, 2025
- Medium6.9An unauthenticated attacker can obtain EV charger energy consumption information of other users.Check if you run itEPSS 0.31%Apr 15, 2025
- Medium6.9An unauthenticated attacker can obtain other users' charger information.Check if you run itEPSS 0.59%Apr 15, 2025
- Medium6.9Unauthenticated attackers can query an API endpoint and get device details.Check if you run itEPSS 0.59%Apr 15, 2025
- Medium6.9Unauthenticated attackers can obtain restricted information about a user's smart device collections (i.e., "scenes").Check if you run itEPSS 0.50%Apr 15, 2025
- Medium6.9Unauthenticated attackers can obtain restricted information about a user's smart device collections (i.e., "rooms").Check if you run itEPSS 0.50%Apr 15, 2025
- Medium6.9An attacker can change registered email addresses of other users and take over arbitrary accounts.Check if you run itEPSS 0.85%Apr 15, 2025
- Medium6.9An unauthenticated attacker can obtain a serial number of a smart meter(s) using its owner's username.Check if you run itEPSS 0.50%Apr 15, 2025
- High7.8A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability.Check if you run itEPSS 0.29%Apr 15, 2025
- High7.8A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability.Check if you run itEPSS 0.38%Apr 15, 2025
- Medium6.9An unauthenticated attacker can get users' emails by knowing usernames.Check if you run itEPSS 0.50%Apr 15, 2025
- Low2.2Weblate is a web based localization tool.Check if you run itEPSS 0.38%Apr 15, 2025
- High7.6Jellyfin is an open source self hosted media server.Check if you run itEPSS 0.80%Apr 15, 2025
- High7.5Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).Check if you run itEPSS 0.46%Apr 15, 2025
- Critical9.8Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: iSurvey Module).Check if you run itEPSS 0.55%Apr 15, 2025
- Medium5.4Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: XML Services).Check if you run itEPSS 0.34%Apr 15, 2025
- Medium4.0Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF).Check if you run itEPSS 0.22%Apr 15, 2025
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services).Check if you run itEPSS 0.99%Apr 15, 2025
- Medium4.9Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDBCluster Plugin).Check if you run itEPSS 0.63%Apr 15, 2025
- High7.5Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J).Check if you run itEPSS 0.62%Apr 15, 2025
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS).Check if you run itEPSS 0.99%Apr 15, 2025
- Medium4.4Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services).Check if you run itEPSS 0.85%Apr 15, 2025
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure).Check if you run itEPSS 0.92%Apr 15, 2025
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS).Check if you run itEPSS 0.92%Apr 15, 2025
Sort