Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.4The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form_name parameter in all versionCheck if you run itEPSS 0.20%Feb 17, 2026
- Critical9.3LightLLM version 1.1.0 and prior contain an unauthenticated remote code execution vulnerability in PD (prefill-decode) disaggregation mode.Check if you run itEPSS 0.95%Feb 17, 2026
- High8.8TOTOLINK A3002RU_V3 V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the static_ipv6 parameter in the formIpv6Setup function.Check if you run itEPSS 0.56%Feb 17, 2026
- High8.8TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the vpnUser or vpnPassword` parameters in the formFilter function.Check if you run itEPSS 0.39%Feb 17, 2026
- High8.0TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the routernamer`parameter in the formDnsv6 function.Check if you run itEPSS 0.51%Feb 17, 2026
- Critical10.0Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials VulnerabilityPatch nowKEVEPSS 13.33%Feb 17, 2026
- High7.1lty628 aidigu v1.9.1 is vulnerable to Cross Site Scripting (XSS) on the /tools/Password/add page in the input field password.Check if you run itEPSS 0.18%Feb 17, 2026
- Critical9.9A Server-Side Template Injection (SSTI) vulnerability in the Freemarker template engine of Datart v1.0.0-rc.3 allows authenticated attackers to execute arbitrary code via injectingCheck if you run itEPSS 1.09%Feb 17, 2026
- Medium5.7An information exposure vulnerability in Datart v1.0.0-rc.3 allows authenticated attackers to access sensitive data via a custom H2 JDBC connection string.Check if you run itEPSS 0.49%Feb 17, 2026
- High8.8An issue in Datart v1.0.0-rc.3 allows attackers to execute arbitrary code via the url parameter in the JDBC configurationCheck if you run itEPSS 0.56%Feb 17, 2026
- High8.7Malwarebytes AdwCleaner before v.8.7.0 runs as Administrator and performs an insecure log file delete operation in which the target location is user-controllable, allowing a non-adCheck if you run itEPSS 0.16%Feb 17, 2026
- High7.6A SQL injection vulnerability in the alldayoffs feature in Jorani up to v1.0.4, allows an authenticated attacker to execute arbitrary SQL commands via the entity parameter.Check if you run itEPSS 0.26%Feb 17, 2026
- Critical9.4Rocket TRUfusion Enterprise through 7.10.5 exposes the endpoint at /axis2/services/WsPortalV6UpDwAxis2Impl to authenticated users to be able to upload files.Check if you run itEPSS 1.16%Feb 17, 2026
- High7.9rocketsoftware trufusion_enterprise Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.26%Feb 17, 2026
- Low3.5A Cross-Site Request Forgery (CSRF) vulnerability has been identified in phpgurukul Gym Management System 1.0.Check if you run itEPSS 0.16%Feb 17, 2026
- High8.8phpgurukul Student Management System 1.0 is vulnerable to SQL Injection in studentms/admin/search.php via the searchdata parameter.Check if you run itEPSS 0.39%Feb 17, 2026
- High8.8The WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and incluCheck if you run itEPSS 0.80%Feb 16, 2026
- Critical9.8Concierge::Sessions versions from 0.8.1 before 0.8.5 for Perl generate insecure session ids.Check if you run itEPSS 0.48%Feb 16, 2026
- Critical9.8Maypole versions from 2.10 through 2.13 for Perl generates session ids insecurely.Check if you run itEPSS 0.33%Feb 16, 2026
- High7.5Crypt::URandom versions from 0.41 before 0.55 for Perl is vulnerable to a heap buffer overflow in the XS function crypt_urandom_getrandom().Check if you run itEPSS 0.35%Feb 16, 2026
- High8.8The WowRevenue plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check in the 'Notice::install_activate_plugin' function in all verCheck if you run itEPSS 0.44%Feb 16, 2026
- High8.6A vulnerability was detected in Wavlink WL-NU516U1 20251208.Check if you run itEPSS 0.79%Feb 16, 2026
- High8.6A security vulnerability has been detected in Wavlink WL-NU516U1 up to 130/260.Check if you run itEPSS 0.56%Feb 16, 2026
- High7.5A weakness has been identified in Wavlink WL-NU516U1 20251208.Check if you run itEPSS 0.83%Feb 16, 2026
- High7.2SmarterTools SmarterMail before 9526 allows XSS via MAPI requests.Check if you run itEPSS 0.33%Feb 16, 2026
Sort