Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Ghost is a Node.js content management system.Patch nowKEVEPSS 5.06%Feb 20, 2026
- Critical9.8Incorrect Privilege Assignment vulnerability in Rymera Web Co Pty Ltd.Patch nowKEVEPSS 1.77%Feb 20, 2026
- High7.2rymera wholesale_suite Incorrect Privilege AssignmentPatch nowKEVEPSS 0.38%Feb 20, 2026
- Critical9.0Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd.Patch nowKEVEPSS 1.57%Feb 20, 2026
- Unknowngvectors wpforo_forum Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.51%Feb 20, 2026
- UnknownD-Link dir-803_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 3.99%Feb 20, 2026
- Unknownlollms lollms_web_ui Absolute Path TraversalPatch nowKEVEPSS 1.94%Feb 20, 2026
- Unknownopenclaw openclaw Incorrect Resource Transfer Between SpheresPatch nowKEVEPSS 24.43%Feb 19, 2026
- Unknownclavaque s2member Improper Privilege ManagementPatch nowKEVEPSS 0.43%Feb 19, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.40%Feb 19, 2026
- Unknownmcpjam inspector Missing Authentication for Critical FunctionPatch nowKEVEPSS 67.52%Feb 18, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.46%Feb 18, 2026
- Critical10.0Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials VulnerabilityPatch nowKEVEPSS 13.53%Feb 17, 2026
- Unknownidnovate popup_module_\(on_entering\,_exit_popup\,_add_product\)_and_newsletter Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.02%Feb 15, 2026
- UnknownXStream XStream Deserialization of Untrusted DataPatch nowKEVEPSS 11.38%Feb 14, 2026
- High8.8Google Chromium CSS Use-After-Free VulnerabilityPatch nowKEVEPSS 54.96%Feb 13, 2026
- High8.7Soliton Systems K.K FileZen OS Command Injection VulnerabilityPatch nowKEVEPSS 5.25%Feb 12, 2026
- Unknownastro astro Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.64%Feb 12, 2026
- Unknownswim_team_project swim_team Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 32.48%Feb 12, 2026
- Unknownaxllent mailpit Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.81%Feb 11, 2026
- High7.8Apple Multiple Buffer Overflow VulnerabilityPatch nowKEVEPSS 1.39%Feb 11, 2026
- UnknownWPvivid migration\,_backup\,_staging Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 35.12%Feb 11, 2026
- Medium5.5Safetica Kernel Driver Privileged Termination VulnerabilityPatch nowKEVEPSS 0.26%Feb 11, 2026
- Unknowndify dify Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.70%Feb 11, 2026
- Unknownastro astro Storage of File with Sensitive Data Under Web RootPatch nowKEVEPSS 1.54%Feb 11, 2026