Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability.Check this weekEPSS 75.59%Feb 20, 2026
- High7.3PDF-XChange Editor TrackerUpdate Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.30%Feb 20, 2026
- Critical9.8GFI Archiver MArc.Store Missing Authorization Authentication Bypass Vulnerability.Check if you run itEPSS 0.74%Feb 20, 2026
- Critical9.8GFI Archiver MArc.Core Missing Authorization Authentication Bypass Vulnerability.Check if you run itEPSS 0.72%Feb 20, 2026
- High8.8GFI Archiver MArc.Core Deserialization of Untrusted Data Remote Code Execution Vulnerability.Check if you run itEPSS 1.37%Feb 20, 2026
- High8.8GFI Archiver MArc.Store Deserialization of Untrusted Data Remote Code Execution Vulnerability.Check if you run itEPSS 1.37%Feb 20, 2026
- Medium6.8Deciso OPNsense diag_backup.php filename Command Injection Remote Code Execution Vulnerability.Check if you run itEPSS 1.59%Feb 20, 2026
- High7.8Sante DICOM Viewer Pro DCM File Parsing Buffer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 0.34%Feb 20, 2026
- High7.3MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability.Check if you run itEPSS 1.85%Feb 20, 2026
- Medium5.9Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations.Check if you run itEPSS 0.20%Feb 20, 2026
- Medium5.3svelte performance oriented web framework.Check if you run itEPSS 0.43%Feb 20, 2026
- Medium5.1svelte performance oriented web framework.Check if you run itEPSS 0.22%Feb 20, 2026
- Medium5.1svelte performance oriented web framework.Check if you run itEPSS 0.22%Feb 20, 2026
- Medium5.1svelte performance oriented web framework.Check if you run itEPSS 0.21%Feb 20, 2026
- Medium5.3phpMoAdmin 1.1.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the collection parameter.Check if you run itEPSS 0.29%Feb 20, 2026
- Medium5.1phpMoAdmin 1.1.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the newdb parameter.Check if you run itEPSS 0.34%Feb 20, 2026
- Medium5.3phpMoAdmin 1.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized database operations by crafting malicious requests.Check if you run itEPSS 0.38%Feb 20, 2026
- Medium5.1OrientDB 3.0.17 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted JSON payloads to the do…Check if you run itEPSS 0.27%Feb 20, 2026
- Medium5.1OrientDB 3.0.17 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by creating users with script payl…Check if you run itEPSS 0.29%Feb 20, 2026
- Medium5.3OrientDB 3.0.17 GA Community Edition contains cross-site request forgery vulnerabilities that allow attackers to perform unauthorized actions by crafting malicious req…Check if you run itEPSS 0.15%Feb 20, 2026
- Critical9.3thesystem 1.0 contains a command injection vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious input to th…Check if you run itEPSS 9.32%Feb 20, 2026
- High8.8LabCollector 5.423 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code t…Check if you run itEPSS 0.56%Feb 20, 2026
- Medium6.7Foscam Video Management System 1.1.6.6 contains a buffer overflow vulnerability in the UID field that allows local attackers to crash the application by supplying an e…Check if you run itEPSS 0.16%Feb 20, 2026
- Medium5.1Sricam DeviceViewer 3.12.0.1 contains a password change security bypass vulnerability that allows authenticated users to change passwords without proper validation of…Check if you run itEPSS 0.29%Feb 20, 2026
- High8.4Sricam DeviceViewer 3.12.0.1 contains a local buffer overflow vulnerability in the user management add user function that allows authenticated attackers to execute arb…Check if you run itEPSS 0.37%Feb 20, 2026
Sort