Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3InSAT MasterSCADA BUK-TS is susceptible to SQL Injection through its main web interface.Check if you run itEPSS 0.61%Feb 24, 2026
- Medium6.1A cross-site scripting (XSS) vulnerability in a FileMaker WebDirect custom homepage could lead to unauthorized access and remote code execution.Check if you run itEPSS 0.26%Feb 24, 2026
- High8.7Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior implement an authentication token (X-User-Token) with insufficient expiration.Check if you run itEPSS 0.81%Feb 24, 2026
- Critical9.3Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that are not forced to be changed during installation…Check if you run itEPSS 2.89%Feb 24, 2026
- High8.7Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior expose RTSP streams without requiring authentication.Check if you run itEPSS 0.92%Feb 24, 2026
- High8.6EventSentry versions prior to 6.0.1.20 contain an unverified password change vulnerability in the account management functionality of the Web Reports interface.Check if you run itEPSS 0.51%Feb 24, 2026
- Low2.7Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Client-Side Enforcement of Server-Side Security vulnerability.Check if you run itEPSS 0.28%Feb 24, 2026
- Medium5.4Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability.Check if you run itEPSS 0.21%Feb 24, 2026
- High7.2Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Unrestricted Upload of File with Dangerous Type vulnerability.Check if you run itEPSS 0.81%Feb 24, 2026
- High8.8Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Missing Authorization vulnerability.Check if you run itEPSS 0.56%Feb 24, 2026
- Medium6.5Improper access control in multiple DVLS REST API endpoints in Devolutions Server 2025.3.14.0 and earlier allows an authenticated user with view-only permission to access sensitiveCheck if you run itEPSS 0.34%Feb 24, 2026
- Medium4.3A permission cache poisoning vulnerability in Devolutions Server allows authenticated users to bypass permissions to access entries.This issue affects Devolutions Server: before 20Check if you run itEPSS 0.26%Feb 24, 2026
- Medium4.6Mastodon is a free, open-source social network server based on ActivityPub.Check if you run itEPSS 0.31%Feb 24, 2026
- Medium5.8Local privilege escalation in Genetec Update Service.Check if you run itEPSS 0.12%Feb 24, 2026
- Medium5.8Local admin could to leak information from the Genetec Update Service configuration web page.Check if you run itEPSS 0.10%Feb 24, 2026
- High7.5NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker could exploit an improper authentication issue.Check if you run itEPSS 0.53%Feb 24, 2026
- High8.8NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command.Check if you run itEPSS 0.41%Feb 24, 2026
- High8.8NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command.Check if you run itEPSS 0.82%Feb 24, 2026
- High8.8NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could run an unauthorized command.Check if you run itEPSS 0.57%Feb 24, 2026
- High8.8SummaryThis advisory addresses a SQL injection vulnerability in the API endpoint used for retrieving contact activities.Check if you run itEPSS 0.33%Feb 24, 2026
- Critical10.0Altec DocLink (now maintained by Beyond Limits Inc.) version 4.0.336.0 exposes insecure .NET Remoting endpoints over TCP and HTTP/SOAP via Altec.RDCHostService.exe using the ObjectCheck if you run itEPSS 0.86%Feb 24, 2026
- Medium6.6Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Linksys MR9600, Linksys MX4200 allows that contents of a USB drive partition can beCheck if you run itEPSS 0.30%Feb 24, 2026
- Medium4.8Mastodon is a free, open-source social network server based on ActivityPub.Check if you run itEPSS 0.30%Feb 24, 2026
- Medium6.2A vulnerability identified in the HX Agent driver file fekern.sys allowed a threat actor with local user access the ability to gain elevated system privileges.Check if you run itEPSS 0.12%Feb 24, 2026
- Medium6.1NiceGUI is a Python-based UI framework.Check if you run itEPSS 0.20%Feb 24, 2026
Sort