Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A weakness has been identified in Totolink WA300 5.2cu.7112_B20190227.Check if you run itEPSS 1.77%May 4, 2026
- High8.9A security flaw has been discovered in Totolink WA300 5.2cu.7112_B20190227.Check if you run itEPSS 1.02%May 4, 2026
- Low2.1A vulnerability was identified in Totolink WA300 5.2cu.7112_B20190227.Check if you run itEPSS 1.77%May 4, 2026
- High7.4A vulnerability was determined in Totolink WA300 5.2cu.7112_B20190227.Check if you run itEPSS 0.79%May 4, 2026
- Medium5.5A flaw has been found in crocodilestick Calibre-Web-Automated up to 4.0.6.Check if you run itEPSS 0.79%May 4, 2026
- Critical9.0A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2.Check if you run itEPSS 0.75%May 4, 2026
- Medium6.1Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10.Check if you run itEPSS 0.34%May 4, 2026
- Critical9.8A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2.Check if you run itEPSS 1.00%May 4, 2026
- Critical9.9A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10.Check if you run itEPSS 0.62%May 4, 2026
- Medium6.5A privilege escalation vulnerability exists in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10.Check if you run itEPSS 0.50%May 4, 2026
- High7.5A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10.Check if you run itEPSS 0.57%May 4, 2026
- Unknownays-pro quiz_maker Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 11.76%May 4, 2026
- Low2.1A vulnerability has been found in Open5GS up to 2.7.7.Check if you run itEPSS 0.47%May 3, 2026
- Low2.1A security vulnerability has been detected in Telegram Desktop up to 6.7.5.Check if you run itEPSS 0.51%May 3, 2026
- Medium6.5During the analysis, it was identified that authenticated attackers with Subscriber-level access or higher are able to perform an Insecure Direct Object Reference (IDOR) attack.Check if you run itEPSS 0.34%May 3, 2026
- Medium5.3Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence.Check if you run itEPSS 0.43%May 3, 2026
- Low2.1A flaw has been found in kleneway awesome-cursor-mpc-server up to 2.0.1.Check if you run itEPSS 1.82%May 2, 2026
- Low2.1A vulnerability was detected in crazyrabbitLTC mcp-code-review-server up to 0.1.0.Check if you run itEPSS 1.82%May 2, 2026
- Low2.1A security vulnerability has been detected in 8nite metatrader-4-mcp 1.0.0.Check if you run itEPSS 0.40%May 2, 2026
- Medium5.3The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Improper Authorization in all versions up to, and including, 2.1.2.Check if you run itEPSS 0.42%May 2, 2026
- High7.2The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.7.1057.Check if you run itEPSS 0.48%May 2, 2026
- Low2.1A security flaw has been discovered in JeecgBoot up to 3.9.1.Check if you run itEPSS 0.37%May 2, 2026
- High8.1The Profile Builder Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to and including 3.14.5.Check if you run itEPSS 0.62%May 2, 2026
- High7.2The PixelYourSite Pro – Your smart PIXEL (TAG) Manager plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 12.5.0.1…Check if you run itEPSS 0.50%May 2, 2026
- Medium4.4The Ona theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.26 via the ona_activate_child_theme.Check if you run itEPSS 0.32%May 2, 2026