Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1A broken access control vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to create a system admin user and execute arbitrary code as a priviCheck if you run itEPSS 0.61%Feb 24, 2026
- Medium4.3Under certain conditions SAP S/4HANA (Manage Payment Media) allows an authenticated attacker to access information which would otherwise be restricted.Check if you run itEPSS 0.23%Feb 24, 2026
- Low2.0A vulnerability was determined in MuYuCMS 2.7.Check if you run itEPSS 0.78%Feb 24, 2026
- High8.8The Responsive Lightbox & Gallery WordPress plugin before 2.6.1 is vulnerable to an Unauthenticated Stored-XSS attack due to flawed regex replacement rules that can be…Check if you run itEPSS 0.30%Feb 24, 2026
- UnknownMicrosoft Patches CVE-2026-26119 Privilege Escalation in Windows Admin CenterCheck this weekEPSS 11.22%Feb 24, 2026
- Low2.1A vulnerability was detected in SourceCodester Modern Image Gallery App 1.0.Check if you run itEPSS 0.32%Feb 24, 2026
- Medium5.5A security vulnerability has been detected in itsourcecode Document Management System 1.0.Check if you run itEPSS 0.38%Feb 24, 2026
- Medium6.9A weakness has been identified in itsourcecode Document Management System 1.0.Check if you run itEPSS 0.38%Feb 24, 2026
- Medium5.3A vulnerability has been found in HummerRisk up to 1.5.0.Check if you run itEPSS 0.56%Feb 24, 2026
- High7.3An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files and conduct denial-of…Check if you run itEPSS 0.16%Feb 24, 2026
- High7.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.37%Feb 24, 2026
- Medium5.3A flaw has been found in HummerRisk up to 1.5.0.Check this weekEPSS 13.37%Feb 24, 2026
- Medium6.9Pimcore is an Open Source Data & Experience Management Platform.Check if you run itEPSS 0.51%Feb 24, 2026
- High7.2A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.7)C0 could alloCheck if you run itEPSS 0.95%Feb 24, 2026
- Medium5.7Craft is a content management system (CMS).Check if you run itEPSS 0.47%Feb 24, 2026
- Medium6.9Craft is a content management system (CMS).Check if you run itEPSS 0.20%Feb 24, 2026
- High7.0Craft is a content management system (CMS).Check if you run itEPSS 0.49%Feb 24, 2026
- High8.8A post-authentication command injection vulnerability in the log file download function of the Zyxel EX3301-T0 firmware versions through 5.50(ABVY.7)C0 could allow an authenticatedCheck if you run itEPSS 1.54%Feb 24, 2026
- Critical9.8A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)C0 could allow a remote attacker to execute operating systemCheck if you run itEPSS 1.17%Feb 24, 2026
- Medium5.3A vulnerability was detected in HummerRisk up to 1.5.0.Check this weekEPSS 33.14%Feb 24, 2026
- Medium5.3A security vulnerability has been detected in HummerRisk up to 1.5.0.Check this weekEPSS 21.95%Feb 24, 2026
- Medium5.9Craft is a content management system (CMS).Check if you run itEPSS 0.25%Feb 24, 2026
- Medium6.5OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.Check if you run itEPSS 0.60%Feb 24, 2026
- High8.8yt-dlp is a command-line audio/video downloader.Check if you run itEPSS 1.82%Feb 24, 2026
- Critical9.8ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.24%Feb 24, 2026
Sort