Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8ZenTaoPMS v18.11 through v21.6.beta is vulnerable to Directory Traversal in /module/ai/control.php.Check if you run itEPSS 2.61%Feb 26, 2026
- Medium4.3A flaw was found in the FTP GVfs backend.Check if you run itEPSS 0.42%Feb 26, 2026
- Medium4.3A flaw was found in the FTP GVfs backend.Check if you run itEPSS 0.22%Feb 26, 2026
- High7.5Discourse is an open source discussion platform.Check if you run itEPSS 1.27%Feb 26, 2026
- Low2.3VideoLAN VLC for Android prior to version 3.7.0 contains a path traversal vulnerability in the Remote Access Server routing for the authenticated endpoint GET /download.Check if you run itEPSS 0.32%Feb 26, 2026
- Medium5.4Discourse is an open source discussion platform.Check if you run itEPSS 0.17%Feb 26, 2026
- High7.5Discourse is an open source discussion platform.Check if you run itEPSS 0.26%Feb 26, 2026
- High8.2Improper session management in D-Link Wireless N 300 ADSL2+ Modem Router DSL-124 ME_1.00 allows attackers to execute a session hijacking attack via spoofing the IP add…Check if you run itEPSS 0.15%Feb 26, 2026
- Medium5.4A reflected Cross-Site Scripting (XSS) vulnerability exists in the register.php backend script of PuneethReddyHC Event Management System 1.0.Check if you run itEPSS 0.22%Feb 26, 2026
- High8.4Deserialization of untrusted data in the LanguageModel class of Flair from versions 0.4.1 to latest are vulnerable to arbitrary code execution when loading a malicious model.Check if you run itEPSS 0.18%Feb 26, 2026
- High8.4A vulnerability in Google Cloud Vertex AI Workbench from 7/21/2025 to 01/30/2026 allows an attacker to exfiltrate valid Google Cloud access tokens of other users via a…Check if you run itEPSS 0.27%Feb 26, 2026
- Medium6.5Discourse is an open source discussion platform.Check if you run itEPSS 0.93%Feb 26, 2026
- Medium4.8Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'customerVATNumber', in 'a3factura-app.wolterskluwer.es/#/incomes/salesDeliveryNotes'…Check if you run itEPSS 0.20%Feb 26, 2026
- Medium4.8Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'customerName', in 'a3factura-app.wolterskluwer.es/#/incomes/salesInvoices' endpoint,…Check if you run itEPSS 0.19%Feb 26, 2026
- Medium4.8Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'name', parameter 'name', in 'a3factura-app.wolterskluwer.es/#/incomes/customers' endp…Check if you run itEPSS 0.19%Feb 26, 2026
- Medium4.8Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'name', in 'a3factura-app.wolterskluwer.es/#/incomes/representatives-management' endpo…Check if you run itEPSS 0.19%Feb 26, 2026
- High7.6Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dokuzsoft Technology Ltd.Check if you run itEPSS 0.22%Feb 26, 2026
- High8.6SIMPLE.ERP is vulnerable to the SQL Injection in search functionality in "Obroty na kontach" window.Check if you run itEPSS 0.32%Feb 26, 2026
- High7.3Improper neutralization of input in Checkmk versions 2.4.0 before 2.4.0p22, and 2.3.0 before 2.3.0p43 allows an attacker that can manipulate a host's check output to i…Check if you run itEPSS 0.17%Feb 26, 2026
- High7.2Deserialization of Untrusted Data vulnerability in Stylemix uListing ulisting allows Object Injection.This issue affects uListing: from n/a through <= 2.2.0.Check if you run itEPSS 0.44%Feb 26, 2026
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VeronaLabs WP SMS wp-sms allows SQL Injection.This issue affects…Check if you run itEPSS 0.32%Feb 26, 2026
- Medium5.3Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in villatheme WooCommerce Photo Reviews woocommerce-photo-reviews allows Co…Check if you run itEPSS 0.22%Feb 26, 2026
- Medium6.5Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder allows Retrieve Embedded…Check if you run itEPSS 0.25%Feb 26, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UX-themes Flatsome flatsome allows Stored XSS.This issue affects…Check if you run itEPSS 0.15%Feb 26, 2026
- Medium5.3A HTTP Host header attack vulnerability affects WebClient and the WebScheduler web apps of PcVue in version 15.0.0 through 16.3.3 included, allowing a remote attacker…Check if you run itEPSS 0.24%Feb 26, 2026
Sort