Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Aruba HiSpeed Cache (aruba-hispeed-cache) WordPress plugin versions prior to 3.0.5 contain a cross-site request forgery (CSRF) vulnerability affecting multiple adminis…Check if you run itEPSS 0.25%Feb 23, 2026
- Critical9.3ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor (elementskit-lite) WordPress plugin versions prior to 3.7.9 expose the REST endpoint /…Check if you run itEPSS 1.25%Feb 23, 2026
- High8.1Improper session management in GCOM EPON 1GE ONU version C00R371V00B01 allows attackers to execute a session hijacking attack via spoofing the IP address of an authenticated user.Check if you run itEPSS 0.24%Feb 23, 2026
- Low2.7free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generation (5G) mobile core networks.Check if you run itEPSS 0.31%Feb 23, 2026
- High8.7Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain an issue in which authenticated users can steal OAuth 2.0 authorization codes by exploitiCheck if you run itEPSS 0.16%Feb 23, 2026
- Medium5.3A vulnerability was found in erzhongxmu JEEWMS up to 3.7.Check if you run itEPSS 0.34%Feb 23, 2026
- High8.7Versions of the Traccar open-source GPS tracking system starting with 6.11.1 contain an issue in which authenticated users can execute arbitrary JavaScript in the context of otherCheck if you run itEPSS 0.32%Feb 23, 2026
- Medium6.5Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain an issue in which authenticated users who can create or edit devices can set a device toCheck if you run itEPSS 0.37%Feb 23, 2026
- Medium5.3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Jeff Starr Simple Ajax Chat simple-ajax-chat allows Retrieve Embedded Sensitive Data.ThiCheck if you run itEPSS 0.34%Feb 23, 2026
- High7.1Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain a Cross-Site WebSocket Hijacking (CSWSH) vulnerability in the endpoint.Check if you run itEPSS 0.56%Feb 23, 2026
- High8.0TOTOLink X5000R v9.1.0cu_2415_B20250515 contains an OS command injection vulnerability in the setIptvCfg handler of the /usr/sbin/lighttpd executable.Check if you run itEPSS 3.44%Feb 23, 2026
- High7.4A privilege escalation (PE) vulnerability in the Tencent PC Manager app thru 17.10.28554.205 on Windows devices enables a local user to execute programs with elevated privileges.Check if you run itEPSS 0.21%Feb 23, 2026
- High7.4A privilege escalation (PE) vulnerability in the Tencent iOA app thru 210.9.28693.621001 on Windows devices enables a local user to execute programs with elevated privileges.Check if you run itEPSS 0.21%Feb 23, 2026
- Medium6.2strukturag libde265 commit d9fea9d wa discovered to contain a segmentation fault via the component decoder_context::compute_framedrop_table().Check if you run itEPSS 0.19%Feb 23, 2026
- Medium6.9A vulnerability has been found in erzhongxmu JEEWMS 3.7.Check if you run itEPSS 0.40%Feb 23, 2026
- Medium6.9A flaw has been found in ShuoRen Smart Heating Integrated Management Platform 1.0.0.Check if you run itEPSS 0.44%Feb 23, 2026
- Medium4.0saitoha libsixel until v1.8.7 was discovered to contain a memory leak via the component malloc_stub.c.Check if you run itEPSS 0.14%Feb 23, 2026
- High7.5Valkey is a distributed key-value database.Check if you run itEPSS 0.40%Feb 23, 2026
- High7.5Valkey is a distributed key-value database.Check if you run itEPSS 0.85%Feb 23, 2026
- High8.5Valkey is a distributed key-value database.Check if you run itEPSS 0.82%Feb 23, 2026
- Medium5.7An improper access control vulnerability exists where an authenticated user could access areas outside of their authorized scope.Check if you run itEPSS 0.24%Feb 23, 2026
- Low2.7Improper neutralization of special elements in user-supplied input within the ZIA Admin UI could allow an authenticated administrator to access or retrieve unauthorize…Check if you run itEPSS 0.19%Feb 23, 2026
- Low2.7Improper validation of user-supplied input in the ZIA Admin UI could allow an authenticated administrator to initiate backend functions through specific input fields i…Check if you run itEPSS 0.22%Feb 23, 2026
- High7.4A vulnerability was identified in UTT HiPER 810G up to 1.7.7-171114.Check if you run itEPSS 0.79%Feb 23, 2026
- High7.4A vulnerability was determined in UTT HiPER 810G up to 1.7.7-171114.Check if you run itEPSS 0.93%Feb 23, 2026
Sort