Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Unauthenticated Remote Code Execution and Information Disclosure due to Local File Inclusion (LFI) vulnerability in Johnson Controls Frick Controls Quantum HD allow an…Check if you run itEPSS 0.95%Feb 27, 2026
- Critical9.8Improper limitation of a pathname to a restricted directory (Path Traversal) vulnerability in Xerox FreeFlow Core allows unauthorized path traversal leading to RCE.Check if you run itEPSS 0.40%Feb 27, 2026
- Low2.1A weakness has been identified in Sanluan PublicCMS 6.202506.d.Check if you run itEPSS 0.90%Feb 27, 2026
- Critical9.1An arbitrary file-read vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling unauthenticated attackers to read arbitrary files on the system, and potenti…Check if you run itEPSS 0.59%Feb 27, 2026
- Medium5.9Junrar is an open source java RAR archive library.Check if you run itEPSS 0.77%Feb 26, 2026
- Medium6.9Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in hexpm hexpm/hexpm ('Elixir.Hexpm.Store.Local' module) allows Relative P…Check if you run itEPSS 0.43%Feb 26, 2026
- Critical9.8ZenTaoPMS v18.11 through v21.6.beta is vulnerable to Directory Traversal in /module/ai/control.php.Check if you run itEPSS 2.38%Feb 26, 2026
- Low2.3VideoLAN VLC for Android prior to version 3.7.0 contains a path traversal vulnerability in the Remote Access Server routing for the authenticated endpoint GET /download.Check if you run itEPSS 0.42%Feb 26, 2026
- High8.8The Worry Proof Backup plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 0.2.4 via the backup upload functionality.Check if you run itEPSS 0.78%Feb 26, 2026
- Critical9.3Vitess is a database clustering system for horizontal scaling of MySQL.Check if you run itEPSS 0.62%Feb 26, 2026
- High7.5The WP Responsive Images plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0 via the 'src' parameter.Patch nowKEVEPSS 1.76%Feb 26, 2026
- Medium5.3NetExec is a network execution tool.Check if you run itEPSS 0.49%Feb 26, 2026
- High7.4Zed, a code editor, has a Zip Slip (Path Traversal) vulnerability exists in its extension archive extraction functionality prior to version 0.224.4.Check if you run itEPSS 0.42%Feb 26, 2026
- Medium6.4Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP).Check if you run itEPSS 0.46%Feb 26, 2026
- High7.2Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.90%Feb 25, 2026
- Medium6.5LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research.Check if you run itEPSS 0.53%Feb 25, 2026
- High8.8LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research.Check if you run itEPSS 1.09%Feb 25, 2026
- Low2.1A security flaw has been discovered in feiyuchuixue sz-boot-parent up to 1.3.2-beta.Check if you run itEPSS 0.50%Feb 25, 2026
- Medium6.6The Dart and Flutter SDKs provide software development kits for the Dart programming language.Check if you run itEPSS 0.56%Feb 25, 2026
- Critical9.8The FTP client library for Node.js contains a path traversal vulnerability (CWE-22) in versions prior to 5.2.0 in the method.Check if you run itEPSS 1.03%Feb 25, 2026
- Medium5.9In affected version of Octopus Deploy it was possible to remove files and/or contents of files on the host using an API endpoint.Check if you run itEPSS 0.34%Feb 25, 2026
- Medium4.6URLs containing percent-encoded slashes ( or ) can trick wcurl into saving the output file outside of the current directory without the user explicitly asking for it.Check if you run itEPSS 0.38%Feb 25, 2026
- Critical9.2The FTP Backup on the ADM does not properly sanitize filenames received from the FTP server when parsing directory listings.Check if you run itEPSS 0.79%Feb 25, 2026
- Critical9.3Path traversal vulnerability exists in Lanscope Endpoint Manager (On-Premises) Sub-Manager Server Ver.9.4.7.3 and earlier, which may allow an attacker to tamper with a…Check if you run itEPSS 0.88%Feb 25, 2026
- Critical9.8Flask-Reuploaded provides file uploads for Flask.Check if you run itEPSS 1.27%Feb 25, 2026