Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.97%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.97%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.97%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.97%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.97%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 2.01%Feb 27, 2026
- Medium6.6An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.50%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.58%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.58%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.58%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.58%Feb 27, 2026
- Critical9.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an unauthenticated attacker to achieve remote code execution on the system…Check if you run itEPSS 2.23%Feb 27, 2026
- High7.2An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.65%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.55%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.55%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.55%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.55%Feb 27, 2026
- High8.4osctrl is an osquery management solution.Check if you run itEPSS 1.21%Feb 26, 2026
- High8.8Kiteworks is a private data network (PDN).Check if you run itEPSS 3.02%Feb 26, 2026
- High7.3Zen C is a systems programming language that compiles to human-readable GNU C/C11.Check if you run itEPSS 1.16%Feb 26, 2026
- High8.4Vitess is a database clustering system for horizontal scaling of MySQL.Check if you run itEPSS 0.70%Feb 26, 2026
- High7.7WPGraphQL provides a GraphQL API for WordPress sites.Check if you run itEPSS 1.40%Feb 26, 2026
- High8.8Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing.Check if you run itEPSS 0.57%Feb 26, 2026
- Critical10.0TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32.Check if you run itEPSS 1.40%Feb 25, 2026
- Critical9.8Due to missing neutralization of special elements, OS commands can be injected via the update functionality of a TLS-SRP connection, which is normally used for configu…Check if you run itEPSS 0.60%Feb 25, 2026