Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Bludit version 3.16.2 contains a stored cross-site scripting (XSS) vulnerability in the post content functionality.Check if you run itEPSS 0.17%Feb 23, 2026
- Medium5.1Bludit version 3.16.1 contains a cross-site request forgery (CSRF) vulnerability in the /admin/uninstall-plugin/ and /admin/install-theme/ endpoints.Check if you run itEPSS 0.17%Feb 23, 2026
- High8.7Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain an issue in which authenticated users can steal OAuth 2.0 authorization code…Check if you run itEPSS 0.16%Feb 23, 2026
- Medium6.6free5GC is an open-source project for 5th generation (5G) mobile core networks.Check if you run itEPSS 0.66%Feb 23, 2026
- Low2.7free5GC go-upf is the User Plane Function (UPF) implementation for 5G networks that is part of the free5GC project.Check if you run itEPSS 0.61%Feb 23, 2026
- Low2.7free5GC is an open-source project for 5th generation (5G) mobile core networks.Check if you run itEPSS 0.41%Feb 23, 2026
- Low2.7free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generation (5G) mobile core networks.Check if you run itEPSS 0.31%Feb 23, 2026
- Medium5.3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Jeff Starr Simple Ajax Chat simple-ajax-chat allows Retrieve Embedded Sensi…Check if you run itEPSS 0.34%Feb 23, 2026
- Low2.1A vulnerability was found in erzhongxmu JEEWMS up to 3.7.Check if you run itEPSS 0.34%Feb 23, 2026
- Medium5.5A vulnerability has been found in erzhongxmu JEEWMS 3.7.Check if you run itEPSS 0.40%Feb 23, 2026
- Medium5.5A flaw has been found in ShuoRen Smart Heating Integrated Management Platform 1.0.0.Check if you run itEPSS 0.44%Feb 23, 2026
- High8.7Versions of the Traccar open-source GPS tracking system starting with 6.11.1 contain an issue in which authenticated users can execute arbitrary JavaScript in the cont…Check if you run itEPSS 0.32%Feb 23, 2026
- Medium5.1Aruba HiSpeed Cache (aruba-hispeed-cache) WordPress plugin versions prior to 3.0.5 contain a cross-site request forgery (CSRF) vulnerability affecting multiple adminis…Check if you run itEPSS 0.25%Feb 23, 2026
- Critical9.3ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor (elementskit-lite) WordPress plugin versions prior to 3.7.9 expose the REST endpoint /…Check if you run itEPSS 1.24%Feb 23, 2026
- Medium6.5Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain an issue in which authenticated users who can create or edit devices can set…Check if you run itEPSS 0.37%Feb 23, 2026
- High8.1Improper session management in GCOM EPON 1GE ONU version C00R371V00B01 allows attackers to execute a session hijacking attack via spoofing the IP address of an authenticated user.Check if you run itEPSS 0.24%Feb 23, 2026
- High8.8TOTOLINK X6000R v9.4.0cu.1498_B20250826 contains an OS command injection vulnerability in the NTPSyncWithHost handler of the /usr/sbin/shttpd executable.Check if you run itEPSS 2.04%Feb 23, 2026
- Critical9.8TOTOLINK X5000R v9.1.0cu_2415_B20250515 contains an argument injection vulnerability in the setDiagnosisCfg handler of the /usr/sbin/lighttpd executable.Check if you run itEPSS 0.80%Feb 23, 2026
- Medium6.5Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain a Cross-Site WebSocket Hijacking (CSWSH) vulnerability in the endpoint.Check if you run itEPSS 0.56%Feb 23, 2026
- High7.5Valkey is a distributed key-value database.Check if you run itEPSS 0.40%Feb 23, 2026
- High7.5Valkey is a distributed key-value database.Check if you run itEPSS 0.85%Feb 23, 2026
- High8.0TOTOLink X5000R v9.1.0cu_2415_B20250515 contains an OS command injection vulnerability in the setIptvCfg handler of the /usr/sbin/lighttpd executable.Check if you run itEPSS 3.44%Feb 23, 2026
- High7.1Valkey is a distributed key-value database.Check if you run itEPSS 0.65%Feb 23, 2026
- High7.4A privilege escalation (PE) vulnerability in the Tencent PC Manager app thru 17.10.28554.205 on Windows devices enables a local user to execute programs with elevated privileges.Check if you run itEPSS 0.21%Feb 23, 2026
- High7.4A privilege escalation (PE) vulnerability in the Tencent iOA app thru 210.9.28693.621001 on Windows devices enables a local user to execute programs with elevated privileges.Check if you run itEPSS 0.21%Feb 23, 2026
Sort