Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.4DAG Author (who already has quite a lot of permissions) could manipulate database of Airflow 2 in the way to execute arbitrary code in the web-server context, which th…Check if you run itEPSS 1.23%Feb 24, 2026
- Critical9.4A sandbox escape vulnerability exists in dotCMS’s Velocity scripting engine (VTools) that allows authenticated users with scripting privileges to bypass class and pack…Check if you run itEPSS 0.34%Feb 24, 2026
- High8.1When the "Silent Just-In-Time Provisioning" feature is enabled for a federated identity provider (IDP) there is a risk that a local user store user's information may b…Check if you run itEPSS 0.30%Feb 24, 2026
- Low2.9The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs.Check if you run itEPSS 0.43%Feb 24, 2026
- High7.2An Insecure Direct Object Reference (IDOR) vulnerability exists in Serv-U, which when exploited, gives a malicious actor the ability to execute native code as a privileged account.Check if you run itEPSS 0.60%Feb 24, 2026
- High7.2A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account.Check if you run itEPSS 0.48%Feb 24, 2026
- High7.2A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account.Check if you run itEPSS 0.48%Feb 24, 2026
- High7.2A broken access control vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to create a system admin user and execute arbitrary co…Check if you run itEPSS 0.54%Feb 24, 2026
- Medium4.3Under certain conditions SAP S/4HANA (Manage Payment Media) allows an authenticated attacker to access information which would otherwise be restricted.Check if you run itEPSS 0.23%Feb 24, 2026
- Low2.0A vulnerability was determined in MuYuCMS 2.7.Check if you run itEPSS 0.78%Feb 24, 2026
- High8.8The Responsive Lightbox & Gallery WordPress plugin before 2.6.1 is vulnerable to an Unauthenticated Stored-XSS attack due to flawed regex replacement rules that can be…Check if you run itEPSS 0.30%Feb 24, 2026
- Low2.1A vulnerability was detected in SourceCodester Modern Image Gallery App 1.0.Check if you run itEPSS 0.32%Feb 24, 2026
- Medium5.5A security vulnerability has been detected in itsourcecode Document Management System 1.0.Check if you run itEPSS 0.38%Feb 24, 2026
- Medium5.5A weakness has been identified in itsourcecode Document Management System 1.0.Check if you run itEPSS 0.38%Feb 24, 2026
- Low2.1A vulnerability has been found in HummerRisk up to 1.5.0.Check if you run itEPSS 0.56%Feb 24, 2026
- Low2.1A flaw has been found in HummerRisk up to 1.5.0.Check this weekEPSS 13.37%Feb 24, 2026
- Medium6.9Pimcore is an Open Source Data & Experience Management Platform.Check if you run itEPSS 0.51%Feb 24, 2026
- High7.3An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files and conduct denial-of…Check if you run itEPSS 0.16%Feb 24, 2026
- Low2.1A vulnerability was detected in HummerRisk up to 1.5.0.Check this weekEPSS 33.14%Feb 24, 2026
- Low2.1A security vulnerability has been detected in HummerRisk up to 1.5.0.Check this weekEPSS 21.95%Feb 24, 2026
- Low2.1A security flaw has been discovered in a54552239 pearProjectApi up to 2.8.10.Check if you run itEPSS 0.59%Feb 24, 2026
- Low2.1A vulnerability was identified in Alinto SOGo 5.12.3/5.12.4.Check if you run itEPSS 0.45%Feb 24, 2026
- Medium5.7Craft is a content management system (CMS).Check if you run itEPSS 0.46%Feb 24, 2026
- Medium6.9Craft is a content management system (CMS).Check if you run itEPSS 0.20%Feb 24, 2026
- High7.0Craft is a content management system (CMS).Check if you run itEPSS 0.49%Feb 24, 2026
Sort