Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.3Cross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attacker to execute arbitrary code via a payload into the Email field.Check if you run itEPSS 7.28%Apr 15, 2025
- Medium5.9A SQL injection vulnerability in Hitout car sale 1.0 allows a remote attacker to obtain sensitive information via the orderBy parameter of the StoreController.java component.Check if you run itEPSS 0.28%Apr 15, 2025
- Medium6.5Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via partition in /boafrm/formDiskFormat.Check if you run itEPSS 9.82%Apr 15, 2025
- Medium6.5Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a stack overflow vlunerability via peerPin parameter in the formWsc function.Check if you run itEPSS 5.13%Apr 15, 2025
- Medium6.5Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3_1.0.15 was discovered to contain a command injection vulnerability via the groupname at the /boafrm/formDiskCreateGroup.Check if you run itEPSS 9.47%Apr 15, 2025
- Medium6.5Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3_1.0.15 was discovered to contain a command injection vulnerability via the foldername in /boafrm/formDiskCreateShare.Check if you run itEPSS 9.82%Apr 15, 2025
- Critical9.8TOTOLINK a810r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 34.09%Apr 15, 2025
- Medium6.5TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi.Check if you run itEPSS 0.31%Apr 15, 2025
- Medium5.6RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formiNICbasicREP function.Check if you run itEPSS 0.36%Apr 15, 2025
- Medium4.6TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the pin parameter in the function setWiFiWpsConfig.Check if you run itEPSS 0.22%Apr 15, 2025
- Critical9.8Totolink N600R v4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the macCloneMac parameter in the setWanConfig function.Check if you run itEPSS 0.56%Apr 15, 2025
- High7.3An issue in Oncord+ Android Infotainment Systems OS Android 12, Model Hardware TS17,Hardware part Number F57L_V3.2_20220301, and Build Number PlatformVER:K24-2023/05/09-v0.01 allowCheck if you run itEPSS 0.90%Apr 15, 2025
- Critical9.3st._joe_erp_system_project st._joe_erp_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.11%Apr 14, 2025
- UnknownInstaWP instawp_connect Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 10.60%Apr 11, 2025
- Medium5.5In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can cause a denial of service (application crash).Check if you run itEPSS 0.22%Apr 10, 2025
- Critical9.8Yiiframework Yii Improper Protection of Alternate Path VulnerabilityPatch nowKEVEPSS 87.76%Apr 9, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mm/migrate: fix shmem xarray update during migration A shmem folio can be either in page cache or i…Check if you run itEPSS 0.21%Apr 8, 2025
- UnknownHeap-buffer-overflow in lj_buf_ruleb128Open the advisoryApr 8, 2025
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free VulnerabilityPatch nowKEVEPSS 13.90%Apr 8, 2025
- Critical9.8Langflow Missing Authentication VulnerabilityPatch nowKEVEPSS 99.99%Apr 7, 2025
- UnknownDell dbutildrv2.sys_firmware Improper AuthorizationPatch nowKEVEPSS 0.27%Apr 7, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().Check if you run itEPSS 0.21%Apr 3, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: proc: fix UAF in proc_get_inode() Fix race between rmmod and /proc/XXX's inode instantiation.Check if you run itEPSS 0.23%Apr 3, 2025
- UnknownMicrosoft Windows Protection Mechanism FailurePatch nowKEVEPSS 1.21%Apr 3, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net_sched: Prevent creation of classes with TC_H_ROOT The function qdisc_tree_reduce_backlog() uses…Check if you run itEPSS 0.22%Apr 1, 2025
Sort