Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.0A Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to upload unauthorized content to another user’s repository migration expoCheck if you run itEPSS 0.46%Feb 18, 2026
- High7.6An URL redirection vulnerability was identified in GitHub Enterprise Server that allowed attacker-controlled redirects to leak sensitive authorization tokens.Check if you run itEPSS 0.74%Feb 18, 2026
- Medium6.9A vulnerability has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260206.Check if you run itEPSS 0.62%Feb 18, 2026
- High7.7The Linux Kernel lockdown mode for kernel versions starting on 6.12 and above for Fedora Linux has the lockdown mode disabled without any warning.Check if you run itEPSS 0.25%Feb 18, 2026
- Low3.3A flaw was found in FFmpeg’s TensorFlow backend within the libavfilter/dnn_backend_tf.c source file.Check if you run itEPSS 0.17%Feb 18, 2026
- Medium5.3A NULL pointer dereference vulnerability exists in FFmpeg’s Firequalizer filter (libavfilter/af_firequalizer.c) due to a missing check on the return value of av_malloc_array() in tCheck if you run itEPSS 0.35%Feb 18, 2026
- Medium4.8An insufficient entropy vulnerability was found in glibc.Check if you run itEPSS 0.25%Feb 18, 2026
- Medium6.3A flaw was found in the rgaufman/live555 fork of live555.Check if you run itEPSS 0.37%Feb 18, 2026
- Critical9.3InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments.Check if you run itEPSS 4.61%Feb 18, 2026
- High7.8A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability.Check if you run itEPSS 0.25%Feb 18, 2026
- High7.8A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability.Check if you run itEPSS 0.25%Feb 18, 2026
- Medium5.4Rack is a modular Ruby web server interface.Check if you run itEPSS 0.27%Feb 18, 2026
- High7.5Rack is a modular Ruby web server interface.Check if you run itEPSS 0.76%Feb 18, 2026
- Medium5.4The BSV Blockchain SDK is a unified TypeScript SDK for developing scalable apps on the BSV Blockchain.Check if you run itEPSS 0.34%Feb 18, 2026
- High8.8A critical vulnerability exists in the NLTK downloader component of nltk/nltk, affecting all versions.Check if you run itEPSS 1.04%Feb 18, 2026
- Medium6.8In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.7, 9.3.9, and 9.2.11, a user of a Splunk Search Head Cluster (SHC) deployment who holds a role with access to the Splunk indCheck if you run itEPSS 0.35%Feb 18, 2026
- Medium6.8In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.7, 9.3.9, and 9.2.11, a user of a Splunk Search Head Cluster (SHC) deployment who holds a role with access to the Splunk indCheck if you run itEPSS 0.35%Feb 18, 2026
- Medium4.3In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.8, 9.3.9, and 9.2.12, and Splunk Cloud Platform versions below 10.2.2510.3, 10.1.2507.8, 10.0.2503.9, and 9.3.2411.121, a loCheck if you run itEPSS 5.68%Feb 18, 2026
- Medium6.8In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.7, 9.3.8, and 9.2.11, and Splunk Cloud Platform versions below 10.2.2510.0, 10.1.2507.11, 10.0.2503.9, and 9.3.2411.120, a uCheck if you run itEPSS 0.35%Feb 18, 2026
- Medium4.3In Splunk Enterprise versions below 10.0.2, 10.0.3, 9.4.8, and 9.3.9, a low-privileged user who does not hold the "admin" Splunk role could access the Splunk Monitoring Console AppCheck if you run itEPSS 0.22%Feb 18, 2026
- Low3.5In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.5, 9.3.7, and 9.2.9, and Splunk Cloud Platform versions below 10.1.2507.0, 10.0.2503.9, 9.3.2411.112, and 9.3.2408.122, a loCheck if you run itEPSS 0.27%Feb 18, 2026
- Medium4.3The Booking Calendar plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 10.14.14 via the handle_ajax_save function due toCheck if you run itEPSS 0.22%Feb 18, 2026
- High8.7When BIG-IP AFM or BIG-IP DDoS is provisioned, undisclosed traffic can cause TMM to terminate.Check if you run itEPSS 0.33%Feb 18, 2026
- Critical9.5Deserialization of Untrusted Data vulnerability in OpenText™ Directory Services allows Object Injection.Check if you run itEPSS 0.43%Feb 18, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: smb: client: split cached_fid bitfields to avoid shared-byte RMW races is_open, has_lease and on_list are storedCheck if you run itEPSS 0.28%Feb 18, 2026
Sort