Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain hard-coded administrative credentials that cannot be changed by users.Check if you run itEPSS 0.55%Feb 24, 2026
- High8.8Privilege escalation and improper access control in GCOM EPON 1GE C00R371V00B01 allows remote authenticated users to modify administrator only settings and extract adm…Check if you run itEPSS 0.29%Feb 24, 2026
- Medium5.1WWBN AVideo is an open source video platform.Check if you run itEPSS 0.32%Feb 24, 2026
- High7.2An Insecure Direct Object Reference (IDOR) vulnerability exists in Serv-U, which when exploited, gives a malicious actor the ability to execute native code as a privileged account.Check if you run itEPSS 0.59%Feb 24, 2026
- High7.2A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account.Check if you run itEPSS 0.46%Feb 24, 2026
- High7.2A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account.Check if you run itEPSS 0.46%Feb 24, 2026
- High7.2A broken access control vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to create a system admin user and execute arbitrary co…Check if you run itEPSS 0.52%Feb 24, 2026
- Low2.0A vulnerability was determined in MuYuCMS 2.7.Check if you run itEPSS 0.72%Feb 24, 2026
- Medium5.5A security vulnerability has been detected in itsourcecode Document Management System 1.0.Check if you run itEPSS 0.61%Feb 24, 2026
- Medium5.5A weakness has been identified in itsourcecode Document Management System 1.0.Check if you run itEPSS 0.61%Feb 24, 2026
- Medium6.9Pimcore is an Open Source Data & Experience Management Platform.Check if you run itEPSS 0.60%Feb 24, 2026
- Medium5.9Craft is a content management system (CMS).Check if you run itEPSS 0.26%Feb 24, 2026
- High7.2A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.7)…Check if you run itEPSS 0.92%Feb 24, 2026
- Medium4.9A null pointer dereference vulnerability in the Wake-on-LAN CGI program of the Zyxel VMG3625-T50B firmware version through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 fir…Check if you run itEPSS 1.96%Feb 24, 2026
- Medium4.9A null pointer dereference vulnerability in the IP settings CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 fi…Check if you run itEPSS 1.81%Feb 24, 2026
- Medium5.5A vulnerability was determined in DataLinkDC dinky up to 1.2.5.Check if you run itEPSS 1.03%Feb 24, 2026
- Low2.1A vulnerability was found in DataLinkDC dinky up to 1.2.5.Check if you run itEPSS 0.41%Feb 24, 2026
- Medium4.9A null pointer dereference vulnerability in the account settings CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-…Check if you run itEPSS 1.19%Feb 24, 2026
- Medium4.9A null pointer dereference vulnerability in the certificate downloader CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel W…Check if you run itEPSS 0.81%Feb 24, 2026
- Low2.1A vulnerability has been found in DataLinkDC dinky up to 1.2.5.Check if you run itEPSS 0.66%Feb 24, 2026
- Low2.1A flaw has been found in itsourcecode Event Management System 1.0.Check if you run itEPSS 0.49%Feb 24, 2026
- Medium5.5A vulnerability was detected in itsourcecode Event Management System 1.0.Check if you run itEPSS 0.61%Feb 24, 2026
- UnknownCisco Identity Services Engine Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 6.21%Feb 24, 2026
- Medium5.1Bludit version 3.16.1 contains a cross-site request forgery (CSRF) vulnerability in the /admin/uninstall-plugin/ and /admin/install-theme/ endpoints.Check if you run itEPSS 0.22%Feb 23, 2026
- Medium5.1Aruba HiSpeed Cache (aruba-hispeed-cache) WordPress plugin versions prior to 3.0.5 contain a cross-site request forgery (CSRF) vulnerability affecting multiple adminis…Check if you run itEPSS 0.23%Feb 23, 2026