Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'customerName', in 'a3factura-app.wolterskluwer.es/#/incomes/salesInvoices' endpoint, which could aCheck if you run itEPSS 0.19%Feb 26, 2026
- Medium4.8Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'name', parameter 'name', in 'a3factura-app.wolterskluwer.es/#/incomes/customers' endpoint, which cCheck if you run itEPSS 0.19%Feb 26, 2026
- Medium4.8Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'name', in 'a3factura-app.wolterskluwer.es/#/incomes/representatives-management' endpoint, which coCheck if you run itEPSS 0.19%Feb 26, 2026
- High8.6SIMPLE.ERP is vulnerable to the SQL Injection in search functionality in "Obroty na kontach" window.Check if you run itEPSS 0.32%Feb 26, 2026
- High7.3Improper neutralization of input in Checkmk versions 2.4.0 before 2.4.0p22, and 2.3.0 before 2.3.0p43 allows an attacker that can manipulate a host's check output to inject malicioCheck if you run itEPSS 0.17%Feb 26, 2026
- High7.2Deserialization of Untrusted Data vulnerability in Stylemix uListing ulisting allows Object Injection.This issue affects uListing: from n/a through <= 2.2.0.Check if you run itEPSS 0.44%Feb 26, 2026
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VeronaLabs WP SMS wp-sms allows SQL Injection.This issue affects WP SMS: fromCheck if you run itEPSS 0.32%Feb 26, 2026
- Medium5.3Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in villatheme WooCommerce Photo Reviews woocommerce-photo-reviews allows Code Injection.Check if you run itEPSS 0.22%Feb 26, 2026
- Medium6.5Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder allows Retrieve Embedded Sensitive DatCheck if you run itEPSS 0.25%Feb 26, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UX-themes Flatsome flatsome allows Stored XSS.This issue affects Flatsome: froCheck if you run itEPSS 0.15%Feb 26, 2026
- Medium5.3A HTTP Host header attack vulnerability affects WebClient and the WebScheduler web apps of PcVue in version 15.0.0 through 16.3.3 included, allowing a remote attacker to inject harCheck if you run itEPSS 0.24%Feb 26, 2026
- Medium5.3The Secure and SameSite attribute are missing in the GraphicalData web services and WebClient web app of PcVue in version 12.0.0 through 16.3.3 included.Check if you run itEPSS 0.14%Feb 26, 2026
- Low2.3Some HTTP security headers are not properly set by the web server when sending responses to the client application.Check if you run itEPSS 0.17%Feb 26, 2026
- Medium5.3An XSS vulnerability affects the OAuth web services used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 included.Check if you run itEPSS 0.24%Feb 26, 2026
- Low2.3HTTP headers are added by the default configuration of IIS and ASP.net, and are not removed at the deployment phase of the webservices used by the WebVue, WebScheduler, TouchVue anCheck if you run itEPSS 0.20%Feb 26, 2026
- Medium5.3The OAuth grant type Resource Owner Password Credentials (ROPC) flow is still used by the werbservices used by the WebVue, WebScheduler, TouchVue and Snapvue features of PcVue in vCheck if you run itEPSS 0.36%Feb 26, 2026
- Medium5.3A missing origin validation in WebSockets vulnerability affects the GraphicalData web services used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 1Check if you run itEPSS 0.13%Feb 26, 2026
- High8.4The installer of FinalCode Client provided by Digital Arts Inc.Check if you run itEPSS 0.16%Feb 26, 2026
- High8.5The installer of FinalCode Client provided by Digital Arts Inc.Check if you run itEPSS 0.13%Feb 26, 2026
- High8.8The Worry Proof Backup plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 0.2.4 via the backup upload functionality.Check if you run itEPSS 0.83%Feb 26, 2026
- Low1.3Fleet is open source device management software.Check if you run itEPSS 0.27%Feb 26, 2026
- Low1.2Fleet is open source device management software.Check if you run itEPSS 0.21%Feb 26, 2026
- Low0.6Fleet is open source device management software.Check if you run itEPSS 0.14%Feb 26, 2026
- Low1.7Fleet is open source device management software.Check if you run itEPSS 0.30%Feb 26, 2026
- High8.1Ajenti is a Linux and BSD modular server admin panel.Check if you run itEPSS 0.59%Feb 26, 2026
Sort