Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the catid parameter.Check if you run itEPSS 0.37%Feb 27, 2026
- High8.8Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id' parameter.Check if you run itEPSS 0.37%Feb 27, 2026
- High8.8Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the hosting_id parameter.Check if you run itEPSS 0.45%Feb 27, 2026
- High8.2A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fastify path-normalization options are enabled.Check if you run itEPSS 0.76%Feb 27, 2026
- High7.1OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.25%Feb 27, 2026
- Medium6.5OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.45%Feb 27, 2026
- High8.7PublicCMS v5.202506.d and earlier is vulnerable to stored XSS.Check if you run itEPSS 0.40%Feb 27, 2026
- High8.7Multer is a node.js middleware for handling .Check if you run itEPSS 0.74%Feb 27, 2026
- Medium6.5The OpenID Connect (OIDC) authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext in the .universal/authenticat…Check if you run itEPSS 0.19%Feb 27, 2026
- Critical9.8Improper Input Validation vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centreon Open Tickets modules).This issue affects Centreon Open T…Check if you run itEPSS 0.34%Feb 27, 2026
- High8.8Vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centroen Open Ticket modules).This issue affects Centreon Open Tickets on Central Server: f…Check if you run itEPSS 0.63%Feb 27, 2026
- High8.7Multer is a node.js middleware for handling .Check if you run itEPSS 0.74%Feb 27, 2026
- Medium4.8Authenticated Iframe Injection in Dato CMS Web Previews plugin.Check if you run itEPSS 0.36%Feb 27, 2026
- High8.4Arbitrary file write & potential privilege escalation exploiting zip slip vulnerability in Google Web Designer.Check if you run itEPSS 0.16%Feb 27, 2026
- Critical9.8Blind SQL Injection via unsanitized array keys in Service Dependencies deletion.Check if you run itEPSS 0.31%Feb 27, 2026
- Critical9.3Pro3W CMS if vulnerable to SQL injection attacks.Check if you run itEPSS 0.59%Feb 27, 2026
- High7.5A flaw was found in REXML.Check if you run itEPSS 0.55%Feb 27, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in KNOWHY Advanced Technology Trading Ltd.Check if you run itEPSS 0.22%Feb 27, 2026
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Signum Technology Promotion and Training Inc.Check if you run itEPSS 0.43%Feb 27, 2026
- Medium4.9The MailArchiver plugin for WordPress is vulnerable to SQL Injection via the ‘logid’ parameter in all versions up to, and including, 4.5.0 due to insufficient escaping…Check if you run itEPSS 0.30%Feb 27, 2026
- Medium4.8PluXml CMS allows a user's session identifier to be set before authentication.Check if you run itEPSS 0.39%Feb 27, 2026
- Medium5.1PluXml CMS is vulnerable to Stored XSS in Static Pages editing functionality.Check if you run itEPSS 0.20%Feb 27, 2026
- Medium5.1PluXml CMS is vulnerable to Stored XSS in file uploading functionality.Check if you run itEPSS 0.20%Feb 27, 2026
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dayneks Software Industry and Trade Inc.Check if you run itEPSS 0.44%Feb 27, 2026
- Medium5.1Omega-PSIR is vulnerable to Reflected XSS via the lang parameter.Check if you run itEPSS 0.18%Feb 27, 2026
Sort