Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.4WMV to AVI MPEG DVD WMV Convertor 4.6.1217 contains a buffer overflow vulnerability that allows attackers to crash the application by providing an oversized license input.Check if you run itEPSS 0.43%Feb 18, 2026
- Critical9.3WMV to AVI MPEG DVD WMV Convertor 4.6.1217 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the license name and license codeCheck if you run itEPSS 0.76%Feb 18, 2026
- High8.6Ayukov NFTP client 1.71 contains a buffer overflow vulnerability in the SYST command handling that allows remote attackers to execute arbitrary code.Check if you run itEPSS 0.74%Feb 18, 2026
- High8.8SD.NET RIM versions before 4.7.3c contain a SQL injection vulnerability that allows attackers to inject malicious SQL statements through POST parameters 'idtyp' and 'idgremium'.Check if you run itEPSS 0.17%Feb 18, 2026
- High8.7FileOptimizer 14.00.2524 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the FileOptimizer32.ini configuration file.Check if you run itEPSS 0.43%Feb 18, 2026
- Medium5.1Bematech (formerly Logic Controls, now Elgin) MP-4200 TH printer contains a cross-site scripting vulnerability in the admin configuration page.Check if you run itEPSS 0.33%Feb 18, 2026
- Medium4.6iSmartViewPro 1.3.34 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the camera ID input field.Check if you run itEPSS 0.36%Feb 18, 2026
- Medium4.6Foscam Video Management System 1.1.4.9 contains a denial of service vulnerability in the username input field that allows attackers to crash the application.Check if you run itEPSS 0.28%Feb 18, 2026
- High8.7Crystal Live HTTP Server 6.01 contains a directory traversal vulnerability that allows remote attackers to access system files by manipulating URL path segments.Check if you run itEPSS 0.89%Feb 18, 2026
- Medium4.6XMedia Recode 3.4.8.6 contains a denial of service vulnerability that allows attackers to crash the application by loading a specially crafted .m3u playlist file.Check if you run itEPSS 0.29%Feb 18, 2026
- Medium4.6ScadaApp for iOS 1.1.4.0 contains a denial of service vulnerability that allows attackers to crash the application by inputting an oversized buffer in the Servername field.Check if you run itEPSS 0.28%Feb 18, 2026
- Medium4.6ipPulse 1.92 contains a denial of service vulnerability that allows local attackers to crash the application by providing an oversized input in the Enter Key field.Check if you run itEPSS 0.19%Feb 18, 2026
- High8.6A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JBCheck this weekEPSS 13.91%Feb 18, 2026
- Medium5.7InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments.Check if you run itEPSS 0.26%Feb 18, 2026
- Medium5.7InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments.Check if you run itEPSS 0.26%Feb 18, 2026
- High8.6Saturn Remote Mouse Server contains a command injection vulnerability that allows unauthenticated attackers to execute arbitrary commands by sending specially crafted UDP JSON framCheck if you run itEPSS 1.00%Feb 18, 2026
- Medium4.8IPFire 2.21 Core Update 127 contains multiple reflected cross-site scripting vulnerabilities in the fwhosts.cgi script that allow attackers to inject malicious scripts through multCheck if you run itEPSS 0.25%Feb 18, 2026
- Medium5.1IPFire 2.21 Core Update 127 contains multiple cross-site scripting vulnerabilities in the ovpnmain.cgi script that allow attackers to inject malicious scripts through VPN configuraCheck if you run itEPSS 0.29%Feb 18, 2026
- Medium5.1IPFire 2.21 Core Update 127 contains multiple reflected cross-site scripting vulnerabilities in the hosts.cgi script that allow attackers to inject malicious scripts through unvaliCheck if you run itEPSS 0.29%Feb 18, 2026
- Medium5.1IPFire 2.21 Core Update 127 contains a reflected cross-site scripting vulnerability in the updatexlrator.cgi script that allows attackers to inject malicious scripts through POST pCheck if you run itEPSS 0.29%Feb 18, 2026
- Medium5.7InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments.Check if you run itEPSS 0.32%Feb 18, 2026
- Medium6.5An off-by-one error was found in QEMU's KVM Xen guest support.Check if you run itEPSS 0.17%Feb 18, 2026
- Low3.3A flaw was found in QEMU in the uefi-vars virtual device.Check if you run itEPSS 0.17%Feb 18, 2026
- Medium5.5A flaw was found in the virtio-crypto device of QEMU.Check if you run itEPSS 0.15%Feb 18, 2026
- High7.1An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to merge their own pull request into a repository without having push aCheck if you run itEPSS 0.36%Feb 18, 2026
Sort