Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol.Check if you run itEPSS 0.65%Feb 19, 2026
- Medium6.9go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol.Check if you run itEPSS 0.66%Feb 19, 2026
- Medium6.5Stalwart is a mail and collaboration server.Check if you run itEPSS 0.41%Feb 19, 2026
- High7.1SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice modelCheck if you run itEPSS 0.32%Feb 19, 2026
- Medium5.1NanaZip is an open source file archive.Check if you run itEPSS 0.31%Feb 19, 2026
- Medium5.1NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular chains cause an infinite loop, and deeply nested directories cause uCheck if you run itEPSS 0.18%Feb 19, 2026
- Critical9.3RustFly 2.0.0 contains a command injection vulnerability in its remote UI control mechanism that accepts hex-encoded instructions over UDP port 5005 without proper sanitization.Check if you run itEPSS 2.99%Feb 19, 2026
- Medium5.2NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, NanaZip has an out-of-bounds heap read in bundle header parser due to missingCheck if you run itEPSS 0.21%Feb 19, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal myCred mycred allows Stored XSS.This issue affects myCred: from n/aCheck if you run itEPSS 0.22%Feb 19, 2026
- Medium5.4Missing Authorization vulnerability in Designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DirectCheck if you run itEPSS 0.27%Feb 19, 2026
- Medium5.3Missing Authorization vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Exploiting Incorrectly Configured Access ContCheck if you run itEPSS 0.28%Feb 19, 2026
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Photo Gallery by 10Web photo-gallery allows Stored XSS.This issue affectCheck if you run itEPSS 0.23%Feb 19, 2026
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in VanKarWai Airtifact airtifact allows PHP Local File InclusiCheck if you run itEPSS 0.49%Feb 19, 2026
- Medium5.3Missing Authorization vulnerability in DevsBlink EduBlink edublink allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EduBlink: from n/a thrCheck if you run itEPSS 0.28%Feb 19, 2026
- Medium4.3Missing Authorization vulnerability in YayCommerce YayMail yaymail allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YayMail: from n/a throCheck if you run itEPSS 0.23%Feb 19, 2026
- Medium5.6Buffer overflow in ovpn‑dco‑win version 2.8.0 allows local attackers to cause a system crash by sending too large packets to the remote peer when the AEAD tag appears at the end ofCheck if you run itEPSS 0.13%Feb 19, 2026
- High8.4systeminformation is a System and OS information library for node.js.Check if you run itEPSS 1.37%Feb 19, 2026
- High7.5fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback.Check if you run itEPSS 0.94%Feb 19, 2026
- High7.6Fabric.js is a Javascript HTML5 canvas library.Check if you run itEPSS 0.33%Feb 19, 2026
- High7.5soroban-sdk is a Rust SDK for Soroban contracts.Check if you run itEPSS 0.36%Feb 19, 2026
- High7.1opa-envoy-plugun is a plugin to enforce OPA policies with Envoy.Check if you run itEPSS 0.53%Feb 19, 2026
- Medium5.1PJSIP is a free and open source multimedia communication library.Check if you run itEPSS 0.12%Feb 19, 2026
- High7.5Penpot is an open-source design tool for design and code collaboration.Check if you run itEPSS 0.50%Feb 19, 2026
- High7.0emp3r0r is a C2 designed by Linux users for Linux environments.Check if you run itEPSS 0.33%Feb 19, 2026
- High7.8HDF5 is software for managing data.Check if you run itEPSS 0.42%Feb 19, 2026
Sort