Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.0VMware Aria Operations contains a stored cross-site scripting vulnerability.Check if you run itEPSS 0.43%Feb 25, 2026
- High7.2OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.67%Feb 25, 2026
- Medium5.7OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.28%Feb 25, 2026
- Low2.3A weakness has been identified in feiyuchuixue sz-boot-parent up to 1.3.2-beta.Check if you run itEPSS 0.36%Feb 25, 2026
- Critical9.8A vulnerability in the API user authentication of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain access to an affected system as…Check if you run itEPSS 0.76%Feb 25, 2026
- Medium6.7A vulnerability in the web-based management interface of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker with administr…Check if you run itEPSS 0.68%Feb 25, 2026
- Medium4.8A vulnerability in the web-based management interface of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, remote attacker to conduct a…Check if you run itEPSS 0.18%Feb 25, 2026
- Medium6.5A vulnerability in the CLI and web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker with valid administrative pri…Check if you run itEPSS 0.46%Feb 25, 2026
- Low2.1A security flaw has been discovered in feiyuchuixue sz-boot-parent up to 1.3.2-beta.Check if you run itEPSS 0.50%Feb 25, 2026
- Medium6.2Due to missing authentication, a user with physical access to the device can misuse the mesh functionality for adding a new mesh device to the network to gain access t…Check if you run itEPSS 0.21%Feb 25, 2026
- Critical9.0Budibase is a low code platform for creating internal tools, workflows, and admin panels.Check if you run itEPSS 0.57%Feb 25, 2026
- Critical9.3The administrative credentials can be extracted through application API responses, mobile application reverse engineering, and device firmware reverse engineering.Check if you run itEPSS 0.54%Feb 25, 2026
- Low2.1A vulnerability was identified in feiyuchuixue sz-boot-parent up to 1.3.2-beta.Check if you run itEPSS 0.54%Feb 25, 2026
- Low2.1A vulnerability was determined in feiyuchuixue sz-boot-parent up to 1.3.2-beta.Check if you run itEPSS 0.37%Feb 25, 2026
- Medium5.5A vulnerability was found in feiyuchuixue sz-boot-parent up to 1.3.2-beta.Check if you run itEPSS 0.69%Feb 25, 2026
- Low2.0A time-of-create-to-time-of-use (TOCTOU) vulnerability lets recently deleted-then-recreated data sources be re-deleted without permission to do so.Check if you run itEPSS 0.17%Feb 25, 2026
- High7.5Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityPatch nowKEVEPSS 32.43%Feb 25, 2026
- Medium4.3The Disable Admin Notices – Hide Dashboard Notifications plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.2.Check if you run itEPSS 0.14%Feb 25, 2026
- High7.5The WPGSI: Spreadsheet Integration plugin for WordPress is vulnerable to unauthorized modification and loss of data due to missing capability checks and an insecure au…Check if you run itEPSS 0.37%Feb 25, 2026
- Critical9.2The FTP Backup on the ADM does not properly sanitize filenames received from the FTP server when parsing directory listings.Check if you run itEPSS 0.79%Feb 25, 2026
- Medium5.5A vulnerability was found in itsourcecode News Portal Project 1.0.Check if you run itEPSS 0.62%Feb 25, 2026
- Medium5.5A vulnerability has been found in itsourcecode Document Management System 1.0.Check if you run itEPSS 0.62%Feb 25, 2026
- Medium5.5A flaw has been found in itsourcecode College Management System 1.0.Check if you run itEPSS 0.62%Feb 25, 2026
- High8.3The FTP Backup on the ADM will not properly strictly enforce TLS certificate verification while connecting to an FTP server using FTPES/FTPS.Check if you run itEPSS 0.27%Feb 25, 2026
- Low2.1A security vulnerability has been detected in itsourcecode College Management System 1.0.Check if you run itEPSS 0.49%Feb 25, 2026