Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5An unsecured configuration interface on affected devices allows unauthenticated remote attackers to access sensitive information, including hashed credentials and access codes.Check if you run itEPSS 0.40%Apr 28, 2026
- High8.4AVACAST developed by eMPIA Technology has a Unquoted Service Path vulnerability, allowing privileged local attackers to place a malicious executable file in a specific…Check if you run itEPSS 0.12%Apr 28, 2026
- High8.5AVACAST developed by eMPIA Technology, has a DLL Hijacking vulnerability, allowing authenticated local attackers to place a malicious DLL in a specific directory, resu…Check if you run itEPSS 0.11%Apr 28, 2026
- Low2.1A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.25%Apr 28, 2026
- High8.7Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift: before 0.23.0.Check if you run itEPSS 0.45%Apr 28, 2026
- Medium6.5Out-of-bounds Read vulnerability in Apache Thrift.Check if you run itEPSS 0.90%Apr 28, 2026
- Medium5.3Uncontrolled Recursion vulnerability in Apache Thrift.Check if you run itEPSS 1.10%Apr 28, 2026
- High7.3Integer Overflow or Wraparound vulnerability in Apache Thrift.Check if you run itEPSS 0.93%Apr 28, 2026
- High8.2Out-of-bounds Read vulnerability in Apache Thrift.Check if you run itEPSS 0.92%Apr 28, 2026
- High7.5Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0.Check if you run itEPSS 1.16%Apr 28, 2026
- High7.5Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings.Check if you run itEPSS 1.04%Apr 28, 2026
- High8.9A vulnerability was found in D-Link DI-8100 16.07.26A1.Check if you run itEPSS 2.15%Apr 28, 2026
- High7.3A vulnerability has been found in D-Link DI-8100 16.07.26A1.Check if you run itEPSS 0.72%Apr 28, 2026
- High8.9A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 2.42%Apr 28, 2026
- High8.9A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 2.45%Apr 28, 2026
- High8.9A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 2.45%Apr 28, 2026
- High8.9A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 2.45%Apr 28, 2026
- Medium6.5In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when handled by .Check if you run itEPSS 0.24%Apr 28, 2026
- Medium6.1In Spring AI, having access to a shared environment can expose the ONNX model used by the application.Check if you run itEPSS 0.10%Apr 28, 2026
- High8.8SQL injection vulnerability in Spring AI's allows attackers to execute arbitrary SQL queries via crafted document IDs.Check if you run itEPSS 0.34%Apr 28, 2026
- Medium4.8Due to improper TLS certificate validation in the DeskTime Time Tracking App before version 1.3.674, attackers who can position themselves in the network path between…Check if you run itEPSS 0.18%Apr 28, 2026
- High8.9A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 2.43%Apr 28, 2026
- Low2.0A flaw has been found in code-projects Online Music Site 1.0.Check if you run itEPSS 0.23%Apr 28, 2026
- Medium5.5A vulnerability was detected in AgiFlow scaffold-mcp up to 1.0.27.Check if you run itEPSS 0.45%Apr 28, 2026
- Medium5.5A security vulnerability has been detected in ErlichLiu claude-agent-sdk-master up to b185aa7ff0d864581257008077b4010fca1747bf.Check if you run itEPSS 0.46%Apr 28, 2026
Sort