Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a reflected cross-site scripting vulnerability in the management interface where user input is not properly encodCheck if you run itEPSS 0.18%Feb 27, 2026
- Critical9.3SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a weak session identifier generation vulnerability that allows attackers to forge authenticated sessions by compuCheck if you run itEPSS 0.46%Feb 27, 2026
- Medium6.9SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 use the cryptographically broken MD5 hash function for session cookie generation, weakening session security.Check if you run itEPSS 0.14%Feb 27, 2026
- Medium6.9SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication bypass vulnerability that allows remote attackers to perform unlimited login attempts against tCheck if you run itEPSS 0.36%Feb 27, 2026
- High8.2SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 transmit authentication credentials over unencrypted HTTP, allowing attackers to capture credentials.Check if you run itEPSS 0.22%Feb 27, 2026
- Critical9.3SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a default credentials vulnerability that allows remote attackers to obtain administrative access to the managemenCheck if you run itEPSS 0.51%Feb 27, 2026
- High8.8osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter.Check if you run itEPSS 0.37%Feb 27, 2026
- High8.8osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the products_id parametCheck if you run itEPSS 0.37%Feb 27, 2026
- High8.8osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the reviews_id parameteCheck if you run itEPSS 0.37%Feb 27, 2026
- High8.8Homey BNB V4 contains an SQL injection vulnerability in the administration panel login that allows unauthenticated attackers to bypass authentication by injecting SQL syntax into uCheck if you run itEPSS 0.46%Feb 27, 2026
- High8.8Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'val' parameter.Check if you run itEPSS 0.37%Feb 27, 2026
- High8.8Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'pt' parameter.Check if you run itEPSS 0.37%Feb 27, 2026
- High8.8Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the catid parameter.Check if you run itEPSS 0.37%Feb 27, 2026
- High8.8Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id' parameter.Check if you run itEPSS 0.37%Feb 27, 2026
- High8.8Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the hosting_id parameter.Check if you run itEPSS 0.45%Feb 27, 2026
- High7.1OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.25%Feb 27, 2026
- Medium6.5OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.45%Feb 27, 2026
- High8.2A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fastify path-normalization options are enabled.Check if you run itEPSS 0.76%Feb 27, 2026
- High8.7Multer is a node.js middleware for handling .Check if you run itEPSS 0.74%Feb 27, 2026
- High8.7Multer is a node.js middleware for handling .Check if you run itEPSS 0.74%Feb 27, 2026
- Medium6.5The OpenID Connect (OIDC) authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext in the .universal/authentication.ps1 scripCheck if you run itEPSS 0.19%Feb 27, 2026
- Critical9.9Vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centroen Open Ticket modules).This issue affects Centreon Open Tickets on Central Server: from all beforCheck if you run itEPSS 0.63%Feb 27, 2026
- Critical9.8Improper Input Validation vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centreon Open Tickets modules).This issue affects Centreon Open Tickets on CenCheck if you run itEPSS 0.34%Feb 27, 2026
- High7.5A flaw was found in REXML.Check if you run itEPSS 0.55%Feb 27, 2026
- Medium4.8Authenticated Iframe Injection in Dato CMS Web Previews plugin.Check if you run itEPSS 0.36%Feb 27, 2026
Sort