Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Improper Input Validation vulnerability in Apache Tomcat.Check if you run itEPSS 0.59%Feb 17, 2026
- Medium4.0IBM MQ Operator (SC2 v3.2.0–3.8.1, LTS v2.0.0–2.0.29) and IBM‑supplied MQ Advanced container images (across affected SC2, CD, and LTS 9.3.x–9.4.x releases) contain a vulnerabilityCheck if you run itEPSS 0.13%Feb 17, 2026
- Critical9.1Improper Input Validation vulnerability.Check if you run itEPSS 0.29%Feb 17, 2026
- High7.4A Command Injection vulnerability exists where an authenticated, remote attacker could execute arbitrary code on the underlying server where Tenable Security Center is hosted.Check if you run itEPSS 1.31%Feb 17, 2026
- High7.1IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 is vulnerable to an XML external entity injection (XXE) attack wheCheck if you run itEPSS 0.35%Feb 17, 2026
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 could allow an authenticated user to obtain sensitive informationCheck if you run itEPSS 0.21%Feb 17, 2026
- Medium6.5IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 could allow an authenticated user to cause a denial of service dueCheck if you run itEPSS 0.28%Feb 17, 2026
- Medium6.5IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 12.1.0 through 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralizatioCheck if you run itEPSS 0.29%Feb 17, 2026
- Medium6.3A vulnerability was determined in Beetel 777VR1 up to 01.00.09.Check if you run itEPSS 0.40%Feb 17, 2026
- High8.5Glory RBG-100 recycler systems using the ISPK-08 software component contain multiple system binaries with overly permissive file permissions.Check if you run itEPSS 0.16%Feb 17, 2026
- Critical9.3Glory RBG-100 recycler systems using the ISPK-08 software component contain hard-coded operating system credentials that allow remote authentication to the underlying Linux system.Check if you run itEPSS 0.66%Feb 17, 2026
- Medium5.3A vulnerability was found in Beetel 777VR1 up to 01.00.09.Check if you run itEPSS 0.61%Feb 17, 2026
- Medium6.5Missing Authorization vulnerability in Smartypants SP Project & Document Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SP ProjeCheck if you run itEPSS 0.19%Feb 17, 2026
- High8.7A vulnerability has been found in Beetel 777VR1 up to 01.00.09.Check if you run itEPSS 1.24%Feb 17, 2026
- Medium6.5Missing Authorization vulnerability in Paul Custom Content by Country (by Shield Security) custom-content-by-country.This issue affects Custom Content by Country (by Shield SecuritCheck if you run itEPSS 0.31%Feb 17, 2026
- Medium5.4Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability.Check if you run itEPSS 0.19%Feb 17, 2026
- High7.0Use After Free vulnerability in Apache Arrow C++.Check if you run itEPSS 0.85%Feb 17, 2026
- High8.6A flaw has been found in Wavlink WL-NU516U1 up to 20251208.Check this weekEPSS 13.21%Feb 17, 2026
- High8.3SQL injection vulnerability (SQLi) in Clicldeu SaaS, specifically in the generation of reports, which occurs when a previously authenticated remote attacker executes a malicious paCheck if you run itEPSS 0.29%Feb 17, 2026
- Medium4.3The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versCheck if you run itEPSS 0.24%Feb 17, 2026
- High8.7Apache NiFi 1.1.0 through 2.7.2 are missing authorization when updating configuration properties on extension components that have specific Required Permissions based on the RestriCheck if you run itEPSS 0.71%Feb 17, 2026
- High7.2The RSS Aggregator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'template' parameter in all versions up to, and including, 5.0.10 due to insufficienCheck if you run itEPSS 0.28%Feb 17, 2026
- Medium5.8The Frontend File Manager Plugin WordPress plugin through 23.5 allows unauthenticated users to send emails through the site without any security checks.Check if you run itEPSS 0.73%Feb 17, 2026
- Medium5.3The EventPrime plugin for WordPress is vulnerable to unauthorized image file upload in all versions up to, and including, 4.2.8.4.Check if you run itEPSS 0.42%Feb 17, 2026
- High7.7The Zarinpal Gateway for WooCommerce plugin for WordPress is vulnerable to Improper Access Control to Payment Status Update in all versions up to and including 5.0.16.Check if you run itEPSS 0.34%Feb 17, 2026
Sort