Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High8.8The Advanced Woo Labels plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.37.EPSS 0.6%Feb 25, 2026
- Low1.9A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0.EPSS 0.4%Feb 25, 2026
- High8.7The SPIP interface_traduction_objets plugin versions prior to 2.2.2 contain an authenticated remote code execution vulnerability in the translation interface workflow.EPSS 1.2%Feb 25, 2026
- Critical9.3The SPIP tickets plugin versions prior to 4.3.3 contain an unauthenticated remote code execution vulnerability in the forum preview handling for public ticket pages.EPSS 1.4%Feb 25, 2026
- Critical10.0Enclave is a secure JavaScript sandbox designed for safe AI agent code execution.EPSS 1.0%Feb 25, 2026
- High8.4DAG Author (who already has quite a lot of permissions) could manipulate database of Airflow 2 in the way to execute arbitrary code in the web-server context, which th…EPSS 1.1%Feb 24, 2026
- Low2.1A vulnerability was detected in SourceCodester Modern Image Gallery App 1.0.EPSS 0.5%Feb 24, 2026
- Low2.1A vulnerability was identified in Alinto SOGo 5.12.3/5.12.4.EPSS 0.5%Feb 24, 2026
- Low2.0A flaw has been found in horilla-opensource horilla up to 1.0.2.EPSS 0.4%Feb 24, 2026
- Medium5.3ImageMagick is free and open-source software used for editing and manipulating digital images.EPSS 0.2%Feb 24, 2026
- High8.6Improper Control of Generation of Code ('Code Injection') vulnerability in OpenText™ Carbonite Safe Server Backup allows Code Injection.EPSS 0.2%Feb 24, 2026
- Low2.1A flaw has been found in itsourcecode Event Management System 1.0.EPSS 0.5%Feb 24, 2026
- Low1.9A security vulnerability has been detected in xingfuggz BaykeShop up to 1.3.20.EPSS 0.4%Feb 23, 2026
- Low2.1A vulnerability was determined in erzhongxmu JEEWMS up to 3.7.EPSS 0.5%Feb 23, 2026
- Low2.1A vulnerability was found in erzhongxmu JEEWMS up to 3.7.EPSS 0.5%Feb 23, 2026
- High8.8TOTOLINK X6000R v9.4.0cu.1498_B20250826 contains an OS command injection vulnerability in the NTPSyncWithHost handler of the /usr/sbin/shttpd executable.EPSS 1.9%Feb 23, 2026
- Low1.9A vulnerability was determined in a466350665 Smart-SSO up to 2.1.1.EPSS 0.4%Feb 23, 2026
- Low2.1A vulnerability was found in a466350665 Smart-SSO up to 2.1.1.EPSS 0.5%Feb 23, 2026
- Low1.9A security flaw has been discovered in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.9.EPSS 0.4%Feb 23, 2026
- Low1.3A vulnerability was identified in higuma web-audio-recorder-js 0.1/0.1.1.EPSS 0.7%Feb 23, 2026
- Low2.0A vulnerability was detected in rymcu forest up to 0.0.5.EPSS 0.4%Feb 22, 2026
- Low2.0A security vulnerability has been detected in rymcu forest up to 0.0.5.EPSS 0.4%Feb 22, 2026
- Low2.1A vulnerability was identified in SapneshNaik Student Management System up to f4b4f0928f0b5551a28ee81ae7e7fe47d9345318.EPSS 0.5%Feb 22, 2026
- Low1.9A vulnerability was found in itsourcecode Student Management System 1.0.EPSS 0.4%Feb 22, 2026
- Low1.9A security vulnerability has been detected in YiFang CMS up to 2.0.5.EPSS 0.4%Feb 22, 2026