Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3Pro3W CMS if vulnerable to SQL injection attacks.Check if you run itEPSS 0.59%Feb 27, 2026
- Critical9.8Blind SQL Injection via unsanitized array keys in Service Dependencies deletion.Check if you run itEPSS 0.31%Feb 27, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in KNOWHY Advanced Technology Trading Ltd.Check if you run itEPSS 0.22%Feb 27, 2026
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Signum Technology Promotion and Training Inc.Check if you run itEPSS 0.43%Feb 27, 2026
- High8.4Arbitrary file write & potential privilege escalation exploiting zip slip vulnerability in Google Web Designer.Check if you run itEPSS 0.16%Feb 27, 2026
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dayneks Software Industry and Trade Inc.Check if you run itEPSS 0.44%Feb 27, 2026
- Medium4.8PluXml CMS allows a user's session identifier to be set before authentication.Check if you run itEPSS 0.39%Feb 27, 2026
- Medium5.1PluXml CMS is vulnerable to Stored XSS in Static Pages editing functionality.Check if you run itEPSS 0.20%Feb 27, 2026
- Medium5.1PluXml CMS is vulnerable to Stored XSS in file uploading functionality.Check if you run itEPSS 0.20%Feb 27, 2026
- Medium4.9The MailArchiver plugin for WordPress is vulnerable to SQL Injection via the ‘logid’ parameter in all versions up to, and including, 4.5.0 due to insufficient escaping on the userCheck if you run itEPSS 0.30%Feb 27, 2026
- Medium5.1Omega-PSIR is vulnerable to Reflected XSS via the lang parameter.Check if you run itEPSS 0.18%Feb 27, 2026
- Medium6.9A Hardcoded Email Credentials Saved as Plaintext in Firmware (CWE-256: Plaintext Storage of a Password) vulnerability in Frick Controls Quantum HD version 10.22 and pr…Check if you run itEPSS 0.26%Feb 27, 2026
- Medium5.3The Japanized for WooCommerce plugin for WordPress is vulnerable to Improper Authentication in versions up to, and including, 2.8.4.Check if you run itEPSS 0.46%Feb 27, 2026
- Medium6.4The Electric Enquiries plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'button' parameter of the electric-enquiry shortcode in all versions up to, and incCheck if you run itEPSS 0.27%Feb 27, 2026
- Medium6.5The OVRI Payment plugin for WordPress contains malicious .htaccess files in version 1.7.0.Check if you run itEPSS 0.35%Feb 27, 2026
- Low3.1A flaw was found in Keycloak’s WebAuthn registration component.Check if you run itEPSS 0.23%Feb 27, 2026
- High8.7Unauthenticated Remote Code Execution and Information Disclosure due to Local File Inclusion (LFI) vulnerability in Johnson Controls Frick Controls Quantum HD allow an unauthenticaCheck if you run itEPSS 1.04%Feb 27, 2026
- High8.8Unauthenticated Remote Code Execution i.e Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows Code InjectioCheck if you run itEPSS 0.71%Feb 27, 2026
- High8.8Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows Code Injection.Check if you run itEPSS 0.45%Feb 27, 2026
- High8.8Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows Code Injection.Check if you run itEPSS 0.45%Feb 27, 2026
- High8.1An attacker may exploit the use of outdated and weak MAC algorithms in the device’s SSH service to potentially compromise the integrity of the SSH session, allowing manipulation ofCheck if you run itEPSS 0.24%Feb 27, 2026
- Critical9.1An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communication, if they aCheck if you run itEPSS 0.24%Feb 27, 2026
- High8.8Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows OS Command Injection.Check if you run itEPSS 1.66%Feb 27, 2026
- Medium6.4The Simple Download Monitor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom field in all versions up to, and including, 4.0.5 due to insufficient inputCheck if you run itEPSS 0.22%Feb 27, 2026
- Medium6.4The WP Accessibility plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'alt' attribute of images processed by the "Long Description UI" feature inCheck if you run itEPSS 0.23%Feb 27, 2026
Sort