Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1A flaw was found in QEMU.Check if you run itEPSS 0.13%Feb 19, 2026
- Medium4.8Use of insecure directory in Spring Data Geode snapshot import extracts archives into predictable, permissive directories under the system temp location.Check if you run itEPSS 0.11%Feb 19, 2026
- Critical9.3SPIP saisies Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 5.59%Feb 19, 2026
- High7.5The Product Table and List Builder for WooCommerce Lite plugin for WordPress is vulnerable to time-based SQL Injection via the 'search' parameter in all versions up to, and includiCheck if you run itEPSS 0.39%Feb 19, 2026
- High7.5gvectors wpforo_forum Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.51%Feb 19, 2026
- Critical10.0Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within the filter functionality.Check if you run itEPSS 3.91%Feb 19, 2026
- Critical9.4Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers.Check if you run itEPSS 0.24%Feb 19, 2026
- High8.7Hyland Alfresco allows unauthenticated attackers to read arbitrary files from protected directories (like WEB-INF) via the "/share/page/resource/" endpoint, thus leading to the disCheck if you run itEPSS 0.46%Feb 19, 2026
- Critical9.2Wings is the server control plane for Pterodactyl, a free, open-source game server management panel.Check if you run itEPSS 0.36%Feb 19, 2026
- High8.7strongMan is a management interface for strongSwan, an OpenSource IPsec-based VPN.Check if you run itEPSS 0.34%Feb 19, 2026
- Medium5.3Echo is a Go web framework.Check if you run itEPSS 0.38%Feb 19, 2026
- Medium5.4Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask.Check if you run itEPSS 0.19%Feb 19, 2026
- Medium6.9Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask.Check if you run itEPSS 0.27%Feb 19, 2026
- Critical9.6jsPDF is a library to generate PDFs in JavaScript.Check if you run itEPSS 0.50%Feb 19, 2026
- High8.5A SSRF and Arbitrary File Read vulnerability in AppSheet Core in Google AppSheet prior to 2025-11-23 allows an authenticated remote attacker to read sensitive local files and accesCheck if you run itEPSS 0.29%Feb 19, 2026
- Critical9.6jsPDF is a library to generate PDFs in JavaScript.Check if you run itEPSS 0.95%Feb 19, 2026
- High8.7jsPDF is a library to generate PDFs in JavaScript.Check if you run itEPSS 0.84%Feb 19, 2026
- Medium5.3changedetection.io is a free open source web page change detection tool.Check if you run itEPSS 1.03%Feb 19, 2026
- Medium5.1Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted input toCheck if you run itEPSS 0.43%Feb 19, 2026
- Medium5.1Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the openvpn_advaCheck if you run itEPSS 0.44%Feb 19, 2026
- Medium5.1Comodo Dome Firewall 2.7.0 contains multiple reflected cross-site scripting vulnerabilities in the openvpn_users endpoint that allow attackers to inject malicious scripts through PCheck if you run itEPSS 0.38%Feb 19, 2026
- Medium5.1Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the antispywareCheck if you run itEPSS 0.46%Feb 19, 2026
- Medium5.1Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the dnsmasq endpCheck if you run itEPSS 0.43%Feb 19, 2026
- Medium5.1Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the VIRUS_ADMINCheck if you run itEPSS 0.40%Feb 19, 2026
- Medium5.1Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting unsanitized input to the EXCEPTIOCheck if you run itEPSS 0.38%Feb 19, 2026
Sort