Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Insufficient protection mechanisms in the Health Module may lead to partial information disclosure.Check if you run itEPSS 0.15%Feb 27, 2026
- High7.1The SmartRemote module has insufficient restrictions on loading URLs, which may lead to some information leakage.Check if you run itEPSS 0.28%Feb 27, 2026
- Medium6.4The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Scroller widget box link attribut…Check if you run itEPSS 0.24%Feb 27, 2026
- Medium6.4The Automotive Car Dealership Business WordPress Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Call to Action' custom fields in all version…Check if you run itEPSS 0.30%Feb 27, 2026
- Critical9.8The Listee theme for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.1.6.Check if you run itEPSS 0.63%Feb 27, 2026
- High8.9A security flaw has been discovered in Totolink N300RH 6.1c.1353_B20190305.Check if you run itEPSS 4.44%Feb 27, 2026
- Low1.9A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1.Check if you run itEPSS 0.26%Feb 27, 2026
- High7.8telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the login(1) implementat…Check if you run itEPSS 0.41%Feb 27, 2026
- Medium5.4The installers for multiple products provided by Soliton Systems K.K.Check if you run itEPSS 0.10%Feb 27, 2026
- Low2.1A security vulnerability has been detected in jizhiCMS up to 2.5.6.Check if you run itEPSS 0.50%Feb 27, 2026
- Low2.1A weakness has been identified in Sanluan PublicCMS 6.202506.d.Check if you run itEPSS 0.76%Feb 27, 2026
- Low2.1A security flaw has been discovered in youlaitech youlai-mall 2.0.0.Check if you run itEPSS 0.43%Feb 27, 2026
- Critical9.1In the query parser in OpenStack Vitrage before 12.0.1, 13.0.0, 14.0.0, and 15.0.0, a user allowed to access the Vitrage API may trigger code execution on the Vitrage…Check if you run itEPSS 0.85%Feb 27, 2026
- Medium5.3The WP Recipe Maker plugin for WordPress is vulnerable to an Insecure Direct Object Reference (IDOR) in versions up to, and including, 10.3.2.Check if you run itEPSS 0.29%Feb 27, 2026
- High7.8Since the encryption algorithm used to protect firmware updates is itself encrypted using key material available to an attacker (or anyone paying attention), the firmw…Check if you run itEPSS 0.17%Feb 27, 2026
- Low2.1A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3.Check if you run itEPSS 0.35%Feb 27, 2026
- High7.5The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in all versions up to, and including, 6.1.17.Check if you run itEPSS 0.16%Feb 27, 2026
- High7.8In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution through a multi-phase attack chain.Check if you run itEPSS 0.24%Feb 27, 2026
- High8.8In OpenClaw before 2026.2.23, tools.exec.safeBins validation for sort could be bypassed via GNU long-option abbreviations (such as --compress-prog) in allowlist mode,…Check if you run itEPSS 0.55%Feb 27, 2026
- Low1.9A vulnerability was determined in berry-lang berry up to 1.1.0.Check if you run itEPSS 0.25%Feb 27, 2026
- Low1.9A vulnerability was found in libvips 8.19.0.Check if you run itEPSS 0.24%Feb 27, 2026
- Low1.9A vulnerability has been found in libvips 8.19.0.Check if you run itEPSS 0.24%Feb 27, 2026
- Low1.9A flaw has been found in libvips 8.19.0.Check if you run itEPSS 0.24%Feb 27, 2026
- Low1.9A vulnerability was detected in libvips 8.19.0.Check if you run itEPSS 0.27%Feb 27, 2026
- High7.4A weakness has been identified in Tenda F453 1.0.0.3.Check if you run itEPSS 0.85%Feb 27, 2026
Sort