Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v.Check if you run itEPSS 0.37%Feb 20, 2026
- Critical9.4An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to escalate privileges via PIN component of the login functionality.Check if you run itEPSS 0.38%Feb 20, 2026
- High7.1An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to obtain sensitive information via the sid query parameter.Check if you run itEPSS 0.31%Feb 20, 2026
- High8.5Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request.Check if you run itEPSS 0.12%Feb 20, 2026
- High8.5Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request.Check if you run itEPSS 0.12%Feb 20, 2026
- Medium6.8Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request.Check if you run itEPSS 0.10%Feb 20, 2026
- High8.4Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request.Check if you run itEPSS 0.13%Feb 20, 2026
- High8.4Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request.Check if you run itEPSS 0.13%Feb 20, 2026
- High8.4Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request.Check if you run itEPSS 0.13%Feb 20, 2026
- High8.5Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request.Check if you run itEPSS 0.11%Feb 20, 2026
- High8.5Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request.Check if you run itEPSS 0.11%Feb 20, 2026
- High8.7Improper Neutralization of Special Elements used in a Command ('Command Injection') in Owl opds 2.2.0.4 allows Command Injection via a crafted network request.Check if you run itEPSS 1.28%Feb 20, 2026
- Medium5.7The web management interface of the device renders the passwords in a plaintext input field.Check if you run itEPSS 0.34%Feb 20, 2026
- High7.5The Wi-Fi router is vulnerable to de-authentication attacks due to the absence of management frame protection, allowing forged deauthentication and disassociation fram…Check if you run itEPSS 0.28%Feb 20, 2026
- Critical9.8The web management interface of the device allows the administrator username and password to be set to blank values.Check if you run itEPSS 0.64%Feb 20, 2026
- High8.2The underlying PLC of the device can be remotely influenced, without proper safeguards or authentication.Check if you run itEPSS 0.51%Feb 20, 2026
- High7.5The embedded web interface of the device does not support HTTPS/TLS for authentication and uses HTTP Basic Authentication.Check if you run itEPSS 0.27%Feb 20, 2026
- Medium6.2HyperCloud versions 2.3.5 through 2.6.8 improperly allowed refresh tokens to be used directly for resource access and failed to invalidate previously issued access tok…Check if you run itEPSS 0.24%Feb 20, 2026
- Critical9.4An Authentication Bypass vulnerability in Smanga 3.2.7 allows an unauthenticated attacker to reset the password of any user (including the administrator) and fully tak…Check if you run itEPSS 0.46%Feb 20, 2026
- Low2.0A weakness has been identified in detronetdip E-commerce 1.0.0.Check if you run itEPSS 0.28%Feb 20, 2026
- Low2.1A security flaw has been discovered in detronetdip E-commerce 1.0.0.Check if you run itEPSS 0.39%Feb 20, 2026
- High7.3A vulnerability was detected in UTT HiPER 520 1.7.7-160105.Check this weekEPSS 10.46%Feb 20, 2026
- High7.3A security vulnerability has been detected in UTT HiPER 520 1.7.7-160105.Check this weekEPSS 11.02%Feb 20, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PixelYourSite PixelYourSite – Your smart PIXEL (TAG) Manager pixe…Check if you run itEPSS 0.17%Feb 20, 2026
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help Desk js-support-ticket allows Blind SQL Injection…Check if you run itEPSS 0.25%Feb 20, 2026
Sort