Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A vulnerability was identified in feiyuchuixue sz-boot-parent up to 1.3.2-beta.Check if you run itEPSS 0.36%Feb 25, 2026
- Medium5.3A vulnerability was determined in feiyuchuixue sz-boot-parent up to 1.3.2-beta.Check if you run itEPSS 0.26%Feb 25, 2026
- Medium6.9A vulnerability was found in feiyuchuixue sz-boot-parent up to 1.3.2-beta.Check if you run itEPSS 0.51%Feb 25, 2026
- High8.1Broadcom VMware Aria Operations Command Injection VulnerabilityPatch nowKEVEPSS 18.32%Feb 25, 2026
- Critical9.8Missing Authentication for Critical Function vulnerability in ePati Cyber Security Technologies Inc.Check if you run itEPSS 2.25%Feb 25, 2026
- Low2.0A time-of-create-to-time-of-use (TOCTOU) vulnerability lets recently deleted-then-recreated data sources be re-deleted without permission to do so.Check if you run itEPSS 0.18%Feb 25, 2026
- Low2.3In JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials config on diskCheck if you run itEPSS 0.15%Feb 25, 2026
- Medium4.3In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurationsCheck if you run itEPSS 0.18%Feb 25, 2026
- Medium6.1In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flowCheck if you run itEPSS 0.19%Feb 25, 2026
- High8.8In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpointCheck if you run itEPSS 0.28%Feb 25, 2026
- Medium5.9In affected version of Octopus Deploy it was possible to remove files and/or contents of files on the host using an API endpoint.Check if you run itEPSS 0.38%Feb 25, 2026
- Medium6.5A security flaw was identified in the Orchestrator Plugin of Red Hat Developer Hub (Backstage).Check if you run itEPSS 0.58%Feb 25, 2026
- Medium5.5A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption headers without authorization.Check if you run itEPSS 0.08%Feb 25, 2026
- High7.0An Insecure Temporary File vulnerability in openSUSE sdbootutil allows local users to pre-create a directory to achieve various effects like: * gain access to possible private infoCheck if you run itEPSS 0.11%Feb 25, 2026
- Critical9.9A malicious user can manipulate the parameters.pathPattern to create PersistentVolumes in arbitrary locations on the host node, potentially overwriting sensitive files or gaining aCheck if you run itEPSS 0.64%Feb 25, 2026
- High8.3A vulnerability has been identified within Rancher Manager, where using self-signed CA certificates and passing the -skip-verify flag to the Rancher CLI login command without alsoCheck if you run itEPSS 0.17%Feb 25, 2026
- Low3.8A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sCheck if you run itEPSS 0.10%Feb 25, 2026
- High7.1A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks.Check if you run itEPSS 0.08%Feb 25, 2026
- High7.5Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityPatch nowKEVEPSS 35.29%Feb 25, 2026
- High7.5Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format VulnerabilityPatch nowKEVEPSS 8.35%Feb 25, 2026
- Medium5.4Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs VulnerabilityPatch nowKEVEPSS 25.80%Feb 25, 2026
- Medium6.4The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ays_block' shortcode in all versions up tCheck if you run itEPSS 0.22%Feb 25, 2026
- Medium4.3The Post Duplicator plugin for WordPress is vulnerable to unauthorized arbitrary protected post meta insertion in all versions up to, and including, 3.0.8.Check if you run itEPSS 0.24%Feb 25, 2026
- Medium4.3The Disable Admin Notices – Hide Dashboard Notifications plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.2.Check if you run itEPSS 0.15%Feb 25, 2026
- Medium4.3The WP Recipe Maker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'ajax_search_recipes' and 'ajax_get_recipe' functionsCheck if you run itEPSS 0.25%Feb 25, 2026
Sort