Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3OpenViking through version 0.1.18, prior to commit 0251c70, contains a broken access control vulnerability that allows unauthenticated attackers to gain ROOT privilege…Check if you run itEPSS 0.49%Feb 26, 2026
- High8.7SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating unio…Check if you run itEPSS 0.64%Feb 26, 2026
- Low1.2Discourse is an open source discussion platform.Check if you run itEPSS 3.23%Feb 26, 2026
- Low1.3Discourse is an open source discussion platform.Check if you run itEPSS 0.23%Feb 26, 2026
- Medium5.3Discourse is an open source discussion platform.Check if you run itEPSS 0.17%Feb 26, 2026
- Low1.3Discourse is an open source discussion platform.Check if you run itEPSS 0.18%Feb 26, 2026
- Low1.3Discourse is an open source discussion platform.Check if you run itEPSS 0.18%Feb 26, 2026
- Medium5.3A vulnerability has been found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118.Check if you run itEPSS 0.48%Feb 26, 2026
- Medium6.9A flaw has been found in itsourcecode School Management System 1.0.Check if you run itEPSS 0.38%Feb 26, 2026
- High8.3Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virtual machine (VM) to flood a host with writes, potentially cauCheck if you run itEPSS 0.26%Feb 26, 2026
- High8.7SPIP versions prior to 4.4.10 contain an authentication bypass vulnerability caused by PHP type juggling that allows unauthenticated attackers to access protected information.Check if you run itEPSS 0.54%Feb 26, 2026
- Low1.3Discourse is an open source discussion platform.Check if you run itEPSS 0.18%Feb 26, 2026
- Medium4.9Discourse is an open source discussion platform.Check if you run itEPSS 0.26%Feb 26, 2026
- Low1.3Discourse is an open source discussion platform.Check if you run itEPSS 0.18%Feb 26, 2026
- Low1.3Discourse is an open source discussion platform.Check if you run itEPSS 0.17%Feb 26, 2026
- Medium4.9Discourse is an open source discussion platform.Check if you run itEPSS 0.26%Feb 26, 2026
- Medium6.9Discourse is an open source discussion platform.Check if you run itEPSS 0.31%Feb 26, 2026
- Medium6.9Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in hexpm hexpm/hexpm ('Elixir.Hexpm.Store.Local' module) allows Relative Path TraversalCheck if you run itEPSS 0.47%Feb 26, 2026
- None0.0Discourse is an open source discussion platform.Check if you run itEPSS 0.19%Feb 26, 2026
- High8.8The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to arbitrary file uploads due to incorrecCheck if you run itEPSS 0.62%Feb 26, 2026
- High8.7The Pelco, Inc.Check if you run itEPSS 0.37%Feb 26, 2026
- Medium4.3Discourse is an open source discussion platform.Check if you run itEPSS 0.18%Feb 26, 2026
- Medium6.4Unitree Go2 firmware versions 1.1.7 through 1.1.11, when used with the Unitree Go2 Android application (com.unitree.doggo2), are vulnerable to remote code execution due to missingCheck if you run itEPSS 0.45%Feb 26, 2026
- High8.5Unitree Go2 firmware versions V1.1.7 through V1.1.9, and V1.1.11 (EDU) do not implement DDS authentication or authorization for the Eclipse CycloneDDS topic rt/api/programming_actuCheck if you run itEPSS 0.65%Feb 26, 2026
- High7.5Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panicCheck if you run itEPSS 0.57%Feb 26, 2026
Sort