Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that under certain circumstances, could haCheck if you run itEPSS 0.35%Feb 25, 2026
- Medium6.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.0 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have, under certain circumstanceCheck if you run itEPSS 0.35%Feb 25, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticatedCheck if you run itEPSS 0.41%Feb 25, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.7 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthorized usCheck if you run itEPSS 0.22%Feb 25, 2026
- Medium4.8GetSimpleCMS Community Edition (CE) versions prior to 3.3.22 (3.3.16 tested) contains a stored cross-site scripting (XSS) vulnerability in the Theme to Components func…Check if you run itEPSS 0.33%Feb 24, 2026
- High8.8Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.52%Feb 24, 2026
- Medium6.9Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.52%Feb 24, 2026
- Medium6.9Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.40%Feb 24, 2026
- Medium6.9Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.41%Feb 24, 2026
- High7.5bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files.Check if you run itEPSS 0.37%Feb 24, 2026
- High7.5Fiber is an Express inspired web framework written in Go.Check if you run itEPSS 0.45%Feb 24, 2026
- High7.7Fiber is an Express inspired web framework written in Go.Check if you run itEPSS 0.70%Feb 24, 2026
- Medium5.5Fiber is an Express inspired web framework written in Go.Check if you run itEPSS 0.67%Feb 24, 2026
- High8.6EventSentry versions prior to 6.0.1.20 contain an unverified password change vulnerability in the account management functionality of the Web Reports interface.Check if you run itEPSS 0.51%Feb 24, 2026
- Critical9.3All versions of InSAT MasterSCADA BUK-TS are susceptible to OS command injection through a field in its MMadmServ web interface.Check if you run itEPSS 1.63%Feb 24, 2026
- Critical9.3InSAT MasterSCADA BUK-TS is susceptible to SQL Injection through its main web interface.Check if you run itEPSS 0.61%Feb 24, 2026
- Medium6.1A cross-site scripting (XSS) vulnerability in a FileMaker WebDirect custom homepage could lead to unauthorized access and remote code execution.Check if you run itEPSS 0.26%Feb 24, 2026
- Medium6.5Improper access control in multiple DVLS REST API endpoints in Devolutions Server 2025.3.14.0 and earlier allows an authenticated user with view-only permission to acc…Check if you run itEPSS 0.34%Feb 24, 2026
- High8.8SummaryThis advisory addresses a SQL injection vulnerability in the API endpoint used for retrieving contact activities.Check if you run itEPSS 0.33%Feb 24, 2026
- Medium4.6Mastodon is a free, open-source social network server based on ActivityPub.Check if you run itEPSS 0.31%Feb 24, 2026
- High8.7Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior implement an authentication token (X-User-Token) with insufficient expiration.Check if you run itEPSS 0.81%Feb 24, 2026
- Critical9.3Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that are not forced to be changed during installation…Check if you run itEPSS 2.89%Feb 24, 2026
- High8.7Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior expose RTSP streams without requiring authentication.Check if you run itEPSS 0.92%Feb 24, 2026
- High7.5NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker could exploit an improper authentication issue.Check if you run itEPSS 0.53%Feb 24, 2026
- Low2.7Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Client-Side Enforcement of Server-Side Security vulnerability.Check if you run itEPSS 0.29%Feb 24, 2026
Sort