Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3A vulnerability was found in EFM iptime A6004MX 14.18.2.Check if you run itEPSS 0.75%Feb 16, 2026
- Medium4.3Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 and Mattermost Plugin Zoom versions <=1.11.0 fail to validate the authenticated user when processing {{/pCheck if you run itEPSS 0.18%Feb 16, 2026
- Medium5.1Stored Cross-Site Scripting (XSS) vulnerability in Kubysoft, which is triggered through multiple parameters in the '/kForms/app' endpoint.Check if you run itEPSS 0.16%Feb 16, 2026
- Medium5.1Stored Cross-Site Scripting (XSS) vulnerability in Kubysoft, where uploaded SVG images are not properly sanitized.Check if you run itEPSS 0.16%Feb 16, 2026
- Medium4.3Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 and Mattermost Plugin Zoom versions <=1.11.0 fail to validate user identity and post ownership in the {{/Check if you run itEPSS 0.18%Feb 16, 2026
- Critical10.0The WhatsApp bridge component in Nanobot binds the WebSocket server to all network interfaces (0.0.0.0) on port 3001 by default and does not require authentication for incoming conCheck if you run itEPSS 0.65%Feb 16, 2026
- Medium4.8Cross-Site Scripting (XSS) vulnerability reflected in Kubysoft, which occurs through multiple parameters within the endpoint ‘/node/kudaby/nodeFN/procedure’.Check if you run itEPSS 0.16%Feb 16, 2026
- Medium5.4Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 fail to properly validate login method restrictions which allows an authenticated user to bypass SSO-onlyCheck if you run itEPSS 0.20%Feb 16, 2026
- Medium6.9A vulnerability has been found in zhanghuanhao LibrarySystem 图书馆管理系统 up to 1.1.1.Check if you run itEPSS 0.33%Feb 16, 2026
- Medium5.3A flaw has been found in WAYOS FBM-220G 24.10.19.Check if you run itEPSS 2.21%Feb 16, 2026
- Medium5.1A vulnerability was detected in LigeroSmart up to 6.1.26.Check if you run itEPSS 0.34%Feb 16, 2026
- Medium5.1A security vulnerability has been detected in LigeroSmart up to 6.1.26.Check if you run itEPSS 0.31%Feb 16, 2026
- Medium5.1A weakness has been identified in LigeroSmart up to 6.1.26.Check if you run itEPSS 0.25%Feb 16, 2026
- Medium6.9A security flaw has been discovered in yued-fe LuLu UI up to 3.0.0.Check if you run itEPSS 3.13%Feb 16, 2026
- Medium5.1A vulnerability was identified in vichan-devel vichan up to 5.1.5.Check if you run itEPSS 0.30%Feb 16, 2026
- High7.3A weakness has been identified in Total VPN 0.5.29.0 on Windows.Check if you run itEPSS 0.18%Feb 16, 2026
- High7.3A security flaw has been discovered in Flos Freeware Notepad2 4.2.22/4.2.23/4.2.24/4.2.25.Check if you run itEPSS 0.18%Feb 16, 2026
- Medium4.3The RegistrationMagic WordPress plugin before 6.0.7.2 does not have proper capability checks, allowing subscribers and above to create forms on the site.Check if you run itEPSS 0.23%Feb 16, 2026
- Medium5.3A vulnerability was determined in opencc JFlow up to 20260129.Check if you run itEPSS 0.33%Feb 16, 2026
- Medium5.3A vulnerability was found in Comfast CF-N1 V2 2.6.0.2.Check this weekEPSS 15.60%Feb 16, 2026
- Medium5.3A vulnerability has been found in Comfast CF-N1 V2 2.6.0.2.Check this weekEPSS 15.05%Feb 16, 2026
- Medium6.9A flaw has been found in Tosei Self-service Washing Machine 4.02.Check if you run itEPSS 3.16%Feb 16, 2026
- Medium5.3A vulnerability was detected in lintsinghua DeepAudit up to 3.0.3.Check if you run itEPSS 0.29%Feb 16, 2026
- Medium5.3A security vulnerability has been detected in MindsDB up to 25.14.1.Check if you run itEPSS 0.27%Feb 16, 2026
- Medium5.3A weakness has been identified in Wavlink WL-WN579A3 up to 20210219.Check if you run itEPSS 9.04%Feb 16, 2026
Sort