Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.7SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting excessive data in the regis…Check if you run itEPSS 0.36%Feb 20, 2026
- Medium6.9GetSimple CMS is a content management system.Check if you run itEPSS 0.23%Feb 20, 2026
- High7.1GetSimple CMS is a content management system.Check if you run itEPSS 0.20%Feb 20, 2026
- High8.1Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations.Check if you run itEPSS 0.39%Feb 20, 2026
- Medium5.3phpMoAdmin 1.1.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the collection parameter.Check if you run itEPSS 0.29%Feb 20, 2026
- Medium5.1phpMoAdmin 1.1.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the newdb parameter.Check if you run itEPSS 0.34%Feb 20, 2026
- Medium5.3phpMoAdmin 1.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized database operations by crafting malicious requests.Check if you run itEPSS 0.38%Feb 20, 2026
- Medium5.1OrientDB 3.0.17 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted JSON payloads to the document endpoiCheck if you run itEPSS 0.27%Feb 20, 2026
- Medium5.1OrientDB 3.0.17 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by creating users with script payloads in the nCheck if you run itEPSS 0.29%Feb 20, 2026
- Medium5.3OrientDB 3.0.17 GA Community Edition contains cross-site request forgery vulnerabilities that allow attackers to perform unauthorized actions by crafting malicious requests to endpCheck if you run itEPSS 0.15%Feb 20, 2026
- Critical9.3thesystem 1.0 contains a command injection vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious input to the run_commandCheck if you run itEPSS 9.32%Feb 20, 2026
- High8.8LabCollector 5.423 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code through POST pCheck if you run itEPSS 0.56%Feb 20, 2026
- Medium6.7Foscam Video Management System 1.1.6.6 contains a buffer overflow vulnerability in the UID field that allows local attackers to crash the application by supplying an excessively loCheck if you run itEPSS 0.16%Feb 20, 2026
- Medium5.1Sricam DeviceViewer 3.12.0.1 contains a password change security bypass vulnerability that allows authenticated users to change passwords without proper validation of the old passwCheck if you run itEPSS 0.29%Feb 20, 2026
- High8.4Sricam DeviceViewer 3.12.0.1 contains a local buffer overflow vulnerability in the user management add user function that allows authenticated attackers to execute arbitrary code bCheck if you run itEPSS 0.37%Feb 20, 2026
- High8.8Part-DB 0.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to login by injecting SQL syntax into authentication parameters.Check if you run itEPSS 0.41%Feb 20, 2026
- High8.8delpino73 Blue-Smiley-Organizer 1.32 contains an SQL injection vulnerability in the datetime parameter that allows unauthenticated attackers to manipulate database queries.Check if you run itEPSS 0.30%Feb 20, 2026
- High8.7Chamilo LMS 1.11.8 contains an arbitrary file upload vulnerability that allows authenticated users to upload and execute PHP files through the elfinder filemanager module.Check if you run itEPSS 0.44%Feb 20, 2026
- Medium5.9Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations.Check if you run itEPSS 0.20%Feb 20, 2026
- Medium5.3svelte performance oriented web framework.Check if you run itEPSS 0.43%Feb 20, 2026
- High7.3MLflow Use of Default Password Authentication Bypass Vulnerability.Check if you run itEPSS 1.08%Feb 20, 2026
- High7.8GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.Check if you run itEPSS 0.71%Feb 20, 2026
- High7.8GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 0.71%Feb 20, 2026
- High7.3GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.Check if you run itEPSS 5.29%Feb 20, 2026
- High8.8GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability.Check if you run itEPSS 1.11%Feb 20, 2026
Sort