Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5An XML External Entity (XXE) vulnerability allows malicious user to perform Server-Side Request Forgery (SSRF) via crafted XML input containing malicious external entity referencesCheck if you run itEPSS 0.30%Feb 27, 2026
- Critical9.8Improper limitation of a pathname to a restricted directory (Path Traversal) vulnerability in Xerox FreeFlow Core allows unauthorized path traversal leading to RCE.Check if you run itEPSS 0.44%Feb 27, 2026
- High8.6IM-LogicDesigner module of intra-mart Accel Platform contains insecure deserialization issue.Check if you run itEPSS 0.42%Feb 27, 2026
- High8.8A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite.Check if you run itEPSS 0.85%Feb 27, 2026
- Medium4.9A flaw was found in Keycloak.Check if you run itEPSS 0.35%Feb 27, 2026
- Medium6.3A flaw was found in uv.Check if you run itEPSS 0.19%Feb 27, 2026
- Medium6.7A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component.Check if you run itEPSS 0.18%Feb 27, 2026
- Medium6.7A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Streams.Check if you run itEPSS 0.22%Feb 27, 2026
- Medium6.7A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Stream API.Check if you run itEPSS 0.18%Feb 27, 2026
- Medium6.5n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions.Check if you run itEPSS 0.38%Feb 27, 2026
- Medium5.1Insufficient protection mechanisms in the Health Module may lead to partial information disclosure.Check if you run itEPSS 0.15%Feb 27, 2026
- High7.1The SmartRemote module has insufficient restrictions on loading URLs, which may lead to some information leakage.Check if you run itEPSS 0.28%Feb 27, 2026
- Medium6.4The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Scroller widget box link attribute in all versCheck if you run itEPSS 0.24%Feb 27, 2026
- Critical9.8The Listee theme for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.1.6.Check if you run itEPSS 0.63%Feb 27, 2026
- Medium6.4The Automotive Car Dealership Business WordPress Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Call to Action' custom fields in all versions up to, andCheck if you run itEPSS 0.30%Feb 27, 2026
- Medium5.3A weakness has been identified in SourceCodester Doctor Appointment System 1.0.Check if you run itEPSS 0.41%Feb 27, 2026
- Medium5.4The installers for multiple products provided by Soliton Systems K.K.Check if you run itEPSS 0.10%Feb 27, 2026
- Critical9.3A security flaw has been discovered in Totolink N300RH 6.1c.1353_B20190305.Check if you run itEPSS 4.44%Feb 27, 2026
- Medium4.8A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1.Check if you run itEPSS 0.26%Feb 27, 2026
- High7.8telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the login(1) implementation of util-lCheck if you run itEPSS 0.41%Feb 27, 2026
- Critical9.1In the query parser in OpenStack Vitrage before 12.0.1, 13.0.0, 14.0.0, and 15.0.0, a user allowed to access the Vitrage API may trigger code execution on the Vitrage…Check if you run itEPSS 0.85%Feb 27, 2026
- Medium5.3A security vulnerability has been detected in jizhiCMS up to 2.5.6.Check if you run itEPSS 0.50%Feb 27, 2026
- Medium5.3The WP Recipe Maker plugin for WordPress is vulnerable to an Insecure Direct Object Reference (IDOR) in versions up to, and including, 10.3.2.Check if you run itEPSS 0.29%Feb 27, 2026
- Medium5.3A weakness has been identified in Sanluan PublicCMS 6.202506.d.Check if you run itEPSS 0.76%Feb 27, 2026
- High7.8Since the encryption algorithm used to protect firmware updates is itself encrypted using key material available to an attacker (or anyone paying attention), the firmware updates mCheck if you run itEPSS 0.17%Feb 27, 2026
Sort