Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7Predictable bucket naming in Vertex AI Experiments in Google Cloud Vertex AI from version 1.21.0 up to (but not including) 1.133.0 on Google Cloud Platform allows an u…Check if you run itEPSS 0.51%Feb 20, 2026
- High8.6Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google Cloud Vertex AI SDK (google-cloud-aiplatform) versions from 1.98.0 up to (but…Check if you run itEPSS 0.61%Feb 20, 2026
- Medium4.8HCL Digital Experience is susceptible to stored cross-site scripting (XSS) in the administrative user interface which would require elevated privileges to exploit.Check if you run itEPSS 0.18%Feb 20, 2026
- Low2.1A vulnerability was identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4.Check if you run itEPSS 0.26%Feb 20, 2026
- Medium5.1Fiverr Clone Script 1.2.2 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the keyword parameter.Check if you run itEPSS 0.25%Feb 20, 2026
- High8.8Fiverr Clone Script 1.2.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through th…Check if you run itEPSS 0.43%Feb 20, 2026
- Low2.1A vulnerability was determined in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4.Check if you run itEPSS 0.23%Feb 20, 2026
- Low2.1A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4.Check if you run itEPSS 0.24%Feb 20, 2026
- Medium5.3Certain Samsung MultiXpress Multifunction Printers may be vulnerable to information disclosure, potentially exposing address book entries and other device configuratio…Check if you run itEPSS 0.17%Feb 20, 2026
- High7.1ADB Explorer is a fluent UI for ADB on Windows.Check if you run itEPSS 0.27%Feb 20, 2026
- High7.5openITCOCKPIT is an open source monitoring tool built for different monitoring engines like Nagios, Naemon and Prometheus.Check if you run itEPSS 0.42%Feb 20, 2026
- Low2.1A vulnerability has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4.Check if you run itEPSS 0.26%Feb 20, 2026
- Medium5.5A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0.Check if you run itEPSS 0.38%Feb 20, 2026
- High8.2A zip-slip path traversal vulnerability in Spring Data Geode's import snapshot functionality allows attackers to write files outside the intended extraction directory.Check if you run itEPSS 0.33%Feb 20, 2026
- Critical9.2Improper Neutralization of Special Elements used in a Command ('Command Injection') in Owl opds 2.2.0.4 allows Command Injection via a crafted network request.Check if you run itEPSS 1.19%Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user profile update workflow (user_settings.php submitting to admin/update_user.php).Check if you run itEPSS 0.20%Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user registration workflow (index.php submitting to admin/user_action.php).Check if you run itEPSS 0.22%Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in radiomobile_front.php via the stationid query parameter.Check if you run itEPSS 0.22%Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in admin/log.php via the search query parameter.Check if you run itEPSS 0.19%Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in log.php via the search query parameter.Check if you run itEPSS 0.24%Feb 20, 2026
- Critical9.1A Host Header Poisoning vulnerability exists in Monica 4.1.2 due to improper handling of the HTTP Host header in app/Providers/AppServiceProvider.php, combined with th…Check if you run itEPSS 0.44%Feb 20, 2026
- High8.8OpenSourcePOS 3.4.1 contains a Local File Inclusion (LFI) vulnerability in the Sales.php::getInvoice() function.Check if you run itEPSS 0.66%Feb 20, 2026
- Medium5.3OpenSourcePOS 3.4.1 has a second order SQL Injection vulnerability in the handling of the currency_symbol configuration field.Check if you run itEPSS 0.35%Feb 20, 2026
- Critical9.8An issue in edu Business Solutions Print Shop Pro WebDesk v.18.34 (fixed in 19.76) allows a remote attacker to escalate privileges via the AccessID parameter.Check if you run itEPSS 0.50%Feb 20, 2026
- High7.6Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v.Check if you run itEPSS 0.33%Feb 20, 2026
Sort