Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCountry State City Dropdown CF7 ‘cnt’ and 'sid' SQL InjectionPatch nowKEVEPSS 13.62%Feb 25, 2026
- Critical9.8FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE).Patch nowKEVEPSS 5.49%Feb 24, 2026
- UnknownMicrosoft Windows External Control of File Name or PathPatch nowKEVEPSS 0.84%Feb 24, 2026
- UnknownCisco Identity Services Engine Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 6.21%Feb 24, 2026
- UnknownLeap13 premium_addons_for_elementor Missing AuthorizationPatch nowKEVEPSS 0.76%Feb 23, 2026
- UnknownHikvision intercom_broadcast_system Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 89.03%Feb 23, 2026
- High7.3Missing AuthorizationPatch nowKEVEPSS 0.64%Feb 20, 2026
- High7.5Ghost is a Node.js content management system.Patch nowKEVEPSS 5.57%Feb 20, 2026
- Critical9.8Incorrect Privilege Assignment vulnerability in Rymera Web Co Pty Ltd.Patch nowKEVEPSS 1.77%Feb 20, 2026
- High7.2rymera wholesale_suite Incorrect Privilege AssignmentPatch nowKEVEPSS 0.38%Feb 20, 2026
- Critical9.0Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd.Patch nowKEVEPSS 1.57%Feb 20, 2026
- Unknowngvectors wpforo_forum Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.51%Feb 20, 2026
- UnknownD-Link dir-803_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 3.99%Feb 20, 2026
- Unknownlollms lollms_web_ui Absolute Path TraversalPatch nowKEVEPSS 1.94%Feb 20, 2026
- Critical9.3SPIP saisies Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 5.59%Feb 19, 2026
- Unknownopenclaw openclaw Incorrect Resource Transfer Between SpheresPatch nowKEVEPSS 24.43%Feb 19, 2026
- Unknownclavaque s2member Improper Privilege ManagementPatch nowKEVEPSS 0.43%Feb 19, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.40%Feb 19, 2026
- Unknownmcpjam inspector Missing Authentication for Critical FunctionPatch nowKEVEPSS 67.52%Feb 18, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.46%Feb 18, 2026
- Critical10.0Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials VulnerabilityPatch nowKEVEPSS 13.53%Feb 17, 2026
- Unknownidnovate popup_module_\(on_entering\,_exit_popup\,_add_product\)_and_newsletter Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.02%Feb 15, 2026
- UnknownXStream XStream Deserialization of Untrusted DataPatch nowKEVEPSS 11.38%Feb 14, 2026
- Critical9.8milvus milvus Missing Authentication for Critical FunctionPatch nowKEVEPSS 4.56%Feb 13, 2026
- High8.8Google Chromium CSS Use-After-Free VulnerabilityPatch nowKEVEPSS 54.96%Feb 13, 2026
Sort