Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A weakness has been identified in getsimpletool mcpo-simple-server up to 0.2.0.Check if you run itEPSS 0.51%Apr 29, 2026
- Medium5.5A security flaw has been discovered in geldata gel-mcp 0.1.0.Check if you run itEPSS 0.56%Apr 29, 2026
- Medium4.8wget2 accepts a server certificate with incorrect Key Usage (KU) or Extended Key Usage (EKU).Check if you run itEPSS 0.15%Apr 29, 2026
- High7.3A vulnerability in B1 Free Archiver v1.5.86 allows files extracted from downloaded archives to bypass Windows Mark of the Web (MotW) protections.Check if you run itEPSS 0.33%Apr 29, 2026
- Medium6.1Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network act…Check if you run itEPSS 0.25%Apr 29, 2026
- Medium6.0Insufficient option length validation in the IPv6 Router Advertisement parser in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause a…Check if you run itEPSS 0.23%Apr 29, 2026
- Low2.1A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0.Check if you run itEPSS 0.32%Apr 29, 2026
- Medium5.5A security vulnerability has been detected in geekgod382 filesystem-mcp-server 1.0.0.Check if you run itEPSS 0.43%Apr 29, 2026
- High8.7Cockpit CMS contains an authenticated remote code execution vulnerability in the /cockpit/collections/save_collection endpoint that allows authenticated attackers with…Check if you run itEPSS 0.84%Apr 29, 2026
- Critical9.3Tenda FH303/A300 firmware V5.07.68_EN contains a session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient…Check if you run itEPSS 0.65%Apr 29, 2026
- Critical9.3Tenda W3002R/A302/W309R wireless routers version V5.07.64_en contain a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settin…Check if you run itEPSS 0.65%Apr 29, 2026
- Critical9.3Tenda W308R v2 V5.07.48 contains a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient session validation.Check if you run itEPSS 0.65%Apr 29, 2026
- High8.6Alloksoft Video joiner 4.6.1217 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string in the L…Check if you run itEPSS 0.16%Apr 29, 2026
- High8.6Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an ov…Check if you run itEPSS 0.17%Apr 29, 2026
- Medium6.9SysGauge 4.5.18 contains a buffer overflow vulnerability in the proxy configuration handler that allows local attackers to cause a denial of service by supplying an ov…Check if you run itEPSS 0.12%Apr 29, 2026
- High7.1LifeSize ClearSea 3.1.4 contains directory traversal vulnerabilities that allow authenticated attackers to download and upload arbitrary files by manipulating path par…Check if you run itEPSS 0.93%Apr 29, 2026
- High7.1VideoFlow Digital Video Protection DVP 2.10 contains an authenticated directory traversal vulnerability that allows attackers with valid credentials to disclose arbitr…Check if you run itEPSS 0.60%Apr 29, 2026
- Medium5.3VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows authenticated attackers to execute arbitrary syst…Check if you run itEPSS 0.21%Apr 29, 2026
- Medium5.1MyBB Recent threads 17.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by creating threads with crafted subject lines.Check if you run itEPSS 0.26%Apr 29, 2026
- High8.7BuddyPress Xprofile Custom Fields Type 2.6.3 contains an arbitrary file deletion vulnerability that allows authenticated users to delete arbitrary files by manipulatin…Check if you run itEPSS 0.45%Apr 29, 2026
- High8.6SysGauge Pro 4.6.12 contains a local buffer overflow vulnerability in the Register function that allows local attackers to overwrite the structured exception handler b…Check if you run itEPSS 0.15%Apr 29, 2026
- Medium6.9PDFunite 0.41.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by processing malformed PDF files during merge operations.Check if you run itEPSS 0.18%Apr 29, 2026
- Medium6.9librsvg2-bin 2.40.13 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service by processing malformed SVG files.Check if you run itEPSS 0.12%Apr 29, 2026
- High8.6Free Download Manager 2.0 Build 417 contains a local buffer overflow vulnerability in the URL import functionality that allows attackers to trigger a structured except…Check if you run itEPSS 0.15%Apr 29, 2026
- High8.6Allok Video to DVD Burner 2.6.1217 contains a stack-based buffer overflow vulnerability in the License Name field that allows local attackers to execute arbitrary code…Check if you run itEPSS 0.16%Apr 29, 2026
Sort