Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A security flaw has been discovered in youlaitech youlai-mall 2.0.0.Check if you run itEPSS 0.43%Feb 27, 2026
- High7.9In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution through a multi-phase attack chain.Check if you run itEPSS 0.24%Feb 27, 2026
- Medium5.3A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3.Check if you run itEPSS 0.35%Feb 27, 2026
- High7.5The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in all versions up to, and including, 6.1.17.Check if you run itEPSS 0.16%Feb 27, 2026
- Critical9.9In OpenClaw before 2026.2.23, tools.exec.safeBins validation for sort could be bypassed via GNU long-option abbreviations (such as --compress-prog) in allowlist mode, leading to apCheck if you run itEPSS 0.55%Feb 27, 2026
- Medium4.8A vulnerability was determined in berry-lang berry up to 1.1.0.Check if you run itEPSS 0.25%Feb 27, 2026
- Medium4.8A vulnerability was found in libvips 8.19.0.Check if you run itEPSS 0.24%Feb 27, 2026
- Medium4.8A vulnerability has been found in libvips 8.19.0.Check if you run itEPSS 0.24%Feb 27, 2026
- Medium4.8A flaw has been found in libvips 8.19.0.Check if you run itEPSS 0.24%Feb 27, 2026
- Medium4.8A vulnerability was detected in libvips 8.19.0.Check if you run itEPSS 0.27%Feb 27, 2026
- Medium6.0Exposure of Sensitive Information to an Unauthorized Actor vulnerability in EFM-Networks, Inc.Check if you run itEPSS 0.44%Feb 27, 2026
- High8.4Stack-based Buffer Overflow vulnerability in SimTech Systems, Inc.Check if you run itEPSS 0.37%Feb 27, 2026
- High8.7A weakness has been identified in Tenda F453 1.0.0.3.Check if you run itEPSS 0.85%Feb 27, 2026
- High7.4A vulnerability was identified in Tenda F453 1.0.0.3.Check if you run itEPSS 0.72%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.73%Feb 27, 2026
- Critical9.8A vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, in which an unexpected return value from the authentication routine is later on processed as a le…Check if you run itEPSS 0.76%Feb 27, 2026
- Critical9.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an unauthenticated attacker to achieve remote code execution on the system…Check if you run itEPSS 3.69%Feb 27, 2026
- Critical9.8An authentication bypass vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, enabling any attackers to bypass the authentication requirement and achiev…Check if you run itEPSS 0.69%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.70%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by modifying maCheck if you run itEPSS 2.14%Feb 27, 2026
- Critical9.8A stack based buffer overflow exists in an API route of XWEB Pro version 1.12.1 and prior, enabling unauthenticated attackers to cause stack corruption and a termination of the proCheck if you run itEPSS 0.83%Feb 27, 2026
- High8.7A security flaw has been discovered in Tenda F453 1.0.0.3.Check if you run itEPSS 1.03%Feb 27, 2026
- Critical9.1An arbitrary file-read vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling unauthenticated attackers to read arbitrary files on the system, and potentially causingCheck if you run itEPSS 0.61%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by configuringCheck if you run itEPSS 2.09%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting maCheck if you run itEPSS 2.09%Feb 27, 2026
Sort