Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low1.9A security vulnerability has been detected in funadmin up to 7.1.0-rc4.Check if you run itEPSS 0.38%Feb 22, 2026
- Medium5.5A weakness has been identified in funadmin up to 7.1.0-rc4.Check if you run itEPSS 0.51%Feb 22, 2026
- Low2.9A security flaw has been discovered in funadmin up to 7.1.0-rc4.Check if you run itEPSS 0.68%Feb 21, 2026
- Medium5.5A vulnerability was identified in funadmin up to 7.1.0-rc4.Check if you run itEPSS 0.74%Feb 21, 2026
- Medium5.5A vulnerability was determined in itsourcecode Vehicle Management System 1.0.Check if you run itEPSS 0.58%Feb 21, 2026
- Low2.3OpenClaw is a personal AI assistant.Check if you run itEPSS 0.34%Feb 21, 2026
- Medium5.5A vulnerability was found in itsourcecode Agri-Trading Online Shopping System 1.0.Check if you run itEPSS 0.61%Feb 21, 2026
- High8.8Formwork is a flat file-based Content Management System (CMS).Check if you run itEPSS 0.54%Feb 21, 2026
- High7.2A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration input could allow command injection.Check if you run itEPSS 3.09%Feb 21, 2026
- Critical9.1Sentry is a developer-first error tracking and performance monitoring tool.Check if you run itEPSS 0.59%Feb 21, 2026
- Medium6.9GetSimple CMS is a content management system.Check if you run itEPSS 0.25%Feb 21, 2026
- High7.1GetSimple CMS is a content management system.Check if you run itEPSS 0.18%Feb 21, 2026
- High7.3MLflow Use of Default Password Authentication Bypass Vulnerability.Check if you run itEPSS 1.24%Feb 20, 2026
- Medium5.3phpMoAdmin 1.1.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the collection parameter.Check if you run itEPSS 0.29%Feb 20, 2026
- Medium5.1phpMoAdmin 1.1.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the newdb parameter.Check if you run itEPSS 0.34%Feb 20, 2026
- Medium5.3phpMoAdmin 1.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized database operations by crafting malicious requests.Check if you run itEPSS 0.38%Feb 20, 2026
- Medium4.8HCL Digital Experience is susceptible to stored cross-site scripting (XSS) in the administrative user interface which would require elevated privileges to exploit.Check if you run itEPSS 0.16%Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user profile update workflow (user_settings.php submitting to admin/update_user.php).Check if you run itEPSS 0.30%Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user registration workflow (index.php submitting to admin/user_action.php).Check if you run itEPSS 0.33%Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in radiomobile_front.php via the stationid query parameter.Check if you run itEPSS 0.33%Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in admin/log.php via the search query parameter.Check if you run itEPSS 0.28%Feb 20, 2026
- Medium5.7The web management interface of the device renders the passwords in a plaintext input field.Check if you run itEPSS 0.37%Feb 20, 2026
- Critical9.8The web management interface of the device allows the administrator username and password to be set to blank values.Check if you run itEPSS 0.69%Feb 20, 2026
- Critical9.4An Authentication Bypass vulnerability in Smanga 3.2.7 allows an unauthenticated attacker to reset the password of any user (including the administrator) and fully tak…Check if you run itEPSS 0.42%Feb 20, 2026
- High8.4The installer for ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツール versions prior to Ver.1.3.7 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic…Check if you run itEPSS 0.19%Feb 20, 2026