Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating unio…Check if you run itEPSS 0.64%Feb 26, 2026
- High8.7SPIP versions prior to 4.4.10 contain an authentication bypass vulnerability caused by PHP type juggling that allows unauthenticated attackers to access protected information.Check if you run itEPSS 0.53%Feb 26, 2026
- High8.3Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virtual machine (VM) to flood a host with writes, po…Check if you run itEPSS 0.26%Feb 26, 2026
- Medium6.4Unitree Go2 firmware versions 1.1.7 through 1.1.11, when used with the Unitree Go2 Android application (com.unitree.doggo2), are vulnerable to remote code execution du…Check if you run itEPSS 0.45%Feb 26, 2026
- High8.5Unitree Go2 firmware versions V1.1.7 through V1.1.9, and V1.1.11 (EDU) do not implement DDS authentication or authorization for the Eclipse CycloneDDS topic rt/api/pro…Check if you run itEPSS 0.65%Feb 26, 2026
- High7.5Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panicCheck if you run itEPSS 0.57%Feb 26, 2026
- None0.0Discourse is an open source discussion platform.Check if you run itEPSS 0.19%Feb 26, 2026
- Medium4.3Discourse is an open source discussion platform.Check if you run itEPSS 0.18%Feb 26, 2026
- Medium6.9Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in hexpm hexpm/hexpm ('Elixir.Hexpm.Store.Local' module) allows Relative P…Check if you run itEPSS 0.47%Feb 26, 2026
- High8.8The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to arbitrary file uploads du…Check if you run itEPSS 0.62%Feb 26, 2026
- High8.7The Pelco, Inc.Check if you run itEPSS 0.37%Feb 26, 2026
- High7.7Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) exists in Workflows in Kibana which could allow an attacker to read arbitrary files fr…Check if you run itEPSS 0.29%Feb 26, 2026
- High7.5Uncontrolled Resource Consumption (CWE-400) in the Timelion component in Kibana can lead Denial of Service via Input Data Manipulation (CAPEC-153)Check if you run itEPSS 0.32%Feb 26, 2026
- Medium6.1A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error.Check if you run itEPSS 0.17%Feb 26, 2026
- Medium5.9VMWare Workstation and Fusion contain a logic flaw in the management of network packets.Check if you run itEPSS 0.22%Feb 26, 2026
- High7.5Inefficient Regular Expression Complexity (CWE-1333) in the AI Inference Anonymization Engine in Kibana can lead Denial of Service via Regular Expression Exponential B…Check if you run itEPSS 0.37%Feb 26, 2026
- High7.5Improper Input Validation (CWE-20) in the internal Content Connectors search endpoint in Kibana can lead Denial of Service via Input Data Manipulation (CAPEC-153)Check if you run itEPSS 0.32%Feb 26, 2026
- Medium6.5Improper Validation of Specified Quantity in Input (CWE-1284) in Kibana can allow an authenticated attacker with view-only privileges to cause a Denial of Service via…Check if you run itEPSS 0.32%Feb 26, 2026
- High7.5Improper Validation of Array Index (CWE-129) in the PostgreSQL protocol parser in Packetbeat can lead Denial of Service via Input Data Manipulation (CAPEC-153).Check if you run itEPSS 0.51%Feb 26, 2026
- High7.8An issue in fastCMS before v.0.1.6 allows a local attacker to execute arbitrary code via the PluginController.java componentCheck if you run itEPSS 0.21%Feb 26, 2026
- Medium6.3VideoLAN VLC for Android prior to version 3.7.0 contains an authentication bypass in the Remote Access Server feature due to missing or insufficient rate limiting on o…Check if you run itEPSS 0.33%Feb 26, 2026
- High7.2Golioth Pouch version 0.1.0, prior to commit 1b2219a1, contains a heap-based buffer overflow in BLE GATT server certificate handling.Check if you run itEPSS 0.17%Feb 26, 2026
- Low2.1Golioth Firmware SDK version 0.19.1 prior to 0.22.0, fixed in commit 0e788217, contain an out-of-bounds read due to improper null termination of a blockwise transfer path.Check if you run itEPSS 0.18%Feb 26, 2026
- Medium6.3Golioth Firmware SDK version 0.10.0 prior to 0.22.0, fixed in commit d7f55b38, contain an out-of-bounds read in LightDB State string parsing.Check if you run itEPSS 0.31%Feb 26, 2026
- Medium6.3Golioth Firmware SDK version 0.10.0 prior to 0.22.0, fixed in commit 48f521b, contain a stack-based buffer overflow in Payload Utils.Check if you run itEPSS 0.34%Feb 26, 2026
Sort