Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.18%Mar 30, 2026
- Medium6.1Multiple stored cross-site scripting (XSS) vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execut…Check if you run itEPSS 0.20%Mar 30, 2026
- High8.7A vulnerability of authorization bypass through user-controlled key in the 'console-survey/api/v1/answer/{EVENTID}/{TIMESTAMP}/' endpoint.Check if you run itEPSS 0.27%Mar 30, 2026
- Low2.1BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Browsing Target GET_FOLDER_ITEMS handler that fails to validate pa…Check if you run itEPSS 0.14%Mar 30, 2026
- Low2.1BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Controller GET_PLAYER_APPLICATION_SETTING_ATTRIBUTE_TEXT and GET_P…Check if you run itEPSS 0.17%Mar 30, 2026
- Low2.1BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Controller LIST_PLAYER_APPLICATION_SETTING_ATTRIBUTES and LIST_PLA…Check if you run itEPSS 0.15%Mar 30, 2026
- High7.1A Cross-Site Request Forgery (CSRF) vulnerability in the WatchGuard Fireware OS WebUI could allow a remote attacker to trigger a denial-of-service (DoS) condition in t…Check if you run itEPSS 0.17%Mar 30, 2026
- High8.4An Insecure Deserialization vulnerability in WatchGuard Fireware OS allows an attacker that has obtained write access to the local filesystem through another vulnerabi…Check if you run itEPSS 0.27%Mar 30, 2026
- High7.8TrueConf Client Download of Code Without Integrity Check VulnerabilityPatch nowKEVEPSS 5.85%Mar 30, 2026
- Medium6.9Device Monitoring Studio 8.10.00.8925 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long…Check if you run itEPSS 0.16%Mar 30, 2026
- High8.7Core FTP/SFTP Server 1.2 contains a buffer overflow vulnerability that allows attackers to crash the service by supplying an excessively long string in the User domain field.Check if you run itEPSS 0.70%Mar 30, 2026
- Medium6.9Navicat for Oracle 12.1.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in t…Check if you run itEPSS 0.20%Mar 30, 2026
- Medium6.9NetworkActiv Web Server 4.0 contains a buffer overflow vulnerability in the username field of the Security options that allows local attackers to crash the application…Check if you run itEPSS 0.22%Mar 30, 2026
- Medium6.9SmartFTP Client 9.0.2615.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in t…Check if you run itEPSS 0.21%Mar 30, 2026
- Medium6.9WebDrive 18.00.5057 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the user…Check if you run itEPSS 0.21%Mar 30, 2026
- Medium6.8Softros LAN Messenger 9.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string to th…Check if you run itEPSS 0.27%Mar 30, 2026
- Medium6.9HeidiSQL 9.5.0.5196 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long file path in the l…Check if you run itEPSS 0.21%Mar 30, 2026
- Medium6.8Free IP Switcher 3.1 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Compu…Check if you run itEPSS 0.29%Mar 30, 2026
- Medium6.8BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the SMTP configuration interface that allows local attackers to crash the application…Check if you run itEPSS 0.22%Mar 30, 2026
- Medium6.9NetSetMan 4.7.1 contains a buffer overflow vulnerability in the Workgroup feature that allows local attackers to crash the application by supplying oversized input.Check if you run itEPSS 0.22%Mar 30, 2026
- Medium6.9Valentina Studio 9.0.4 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Host field.Check if you run itEPSS 0.21%Mar 30, 2026
- Medium6.9FTPShell Server 6.83 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the accou…Check if you run itEPSS 0.22%Mar 30, 2026
- Medium6.9AL-KO Robolinho Update Software has hard-coded AWS Access and Secret keys that allow anyone to access AL-KO's AWS bucket.Check if you run itEPSS 0.37%Mar 30, 2026
- High7.5A flaw was found in libarchive.Check if you run itEPSS 1.09%Mar 30, 2026
- High8.5The Performance Library component of Gigabyte Control Center has an Insecure Deserialization vulnerability.Check if you run itEPSS 0.21%Mar 30, 2026
Sort