Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an authenticated useCheck if you run itEPSS 0.30%Feb 25, 2026
- Medium4.8An issue in OpenFUN Richie (LMS) in src/richie/apps/courses/api.py.Check if you run itEPSS 0.44%Feb 25, 2026
- Critical10.0Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass VulnerabilityPatch nowKEVEPSS 87.62%Feb 25, 2026
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that, under certain conditions, could have aCheck if you run itEPSS 0.27%Feb 25, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting versions from 18.9 before 18.9.1 that could have under certain conditions, allowed an unauthenticated user to cause denialCheck if you run itEPSS 0.41%Feb 25, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticatedCheck if you run itEPSS 0.41%Feb 25, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticatedCheck if you run itEPSS 0.41%Feb 25, 2026
- High8.0GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that under certain circumstances, could haCheck if you run itEPSS 0.35%Feb 25, 2026
- Critical9.6Cross-Site Scripting (XSS) vulnerability in the subtitle loading function of the asbplayer Chrome Extension version 1.14.0 allows attackers to execute arbitrary JavaScript in the cCheck if you run itEPSS 0.38%Feb 25, 2026
- Medium6.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.0 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have, under certain circumstanceCheck if you run itEPSS 0.35%Feb 25, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticatedCheck if you run itEPSS 0.41%Feb 25, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.7 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthorized usCheck if you run itEPSS 0.22%Feb 25, 2026
- UnknownCountry State City Dropdown CF7 ‘cnt’ and 'sid' SQL InjectionPatch nowKEVEPSS 13.62%Feb 25, 2026
- Medium6.9A security flaw has been discovered in itsourcecode News Portal Project 1.0.Check if you run itEPSS 0.38%Feb 24, 2026
- Medium6.9A vulnerability has been found in itsourcecode Document Management System 1.0.Check if you run itEPSS 0.43%Feb 24, 2026
- Medium4.8GetSimpleCMS Community Edition (CE) versions prior to 3.3.22 (3.3.16 tested) contains a stored cross-site scripting (XSS) vulnerability in the Theme to Components functionality witCheck if you run itEPSS 0.33%Feb 24, 2026
- High7.5bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files.Check if you run itEPSS 0.37%Feb 24, 2026
- Critical9.3Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.52%Feb 24, 2026
- Medium6.9Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.52%Feb 24, 2026
- Medium6.9Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.40%Feb 24, 2026
- Medium6.9Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.41%Feb 24, 2026
- High7.5Fiber is an Express inspired web framework written in Go.Check if you run itEPSS 0.45%Feb 24, 2026
- High7.7Fiber is an Express inspired web framework written in Go.Check if you run itEPSS 0.70%Feb 24, 2026
- Medium5.5Fiber is an Express inspired web framework written in Go.Check if you run itEPSS 0.67%Feb 24, 2026
- Critical9.3All versions of InSAT MasterSCADA BUK-TS are susceptible to OS command injection through a field in its MMadmServ web interface.Check if you run itEPSS 1.63%Feb 24, 2026
Sort