Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.34%Feb 13, 2026
- Medium4.9Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.50%Feb 13, 2026
- High7.8BACnet Stack is a BACnet open source protocol stack C library for embedded systems.Check if you run itEPSS 0.44%Feb 13, 2026
- High7.5BACnet Stack is a BACnet open source protocol stack C library for embedded systems.Check if you run itEPSS 0.42%Feb 13, 2026
- Medium5.5BACnet Protocol Stack library provides a BACnet application layer, network layer and media access (MAC) layer communications services.Check if you run itEPSS 0.27%Feb 13, 2026
- High8.1Cursor is a code editor built for programming with AI.Check if you run itEPSS 0.69%Feb 13, 2026
- Medium5.8Local privilege escalation in Genetec Sipelia Plugin.Check if you run itEPSS 0.12%Feb 13, 2026
- Medium5.3beautiful-mermaid versions prior to 0.1.3 contain an SVG attribute injection issue that can lead to cross-site scripting (XSS) when rendering attacker-controlled Mermaid diagrams.Check if you run itEPSS 0.56%Feb 13, 2026
- Medium5.4A vulnerability has been identified where weak file permissions in the Nessus Agent directory on Windows hosts could allow unauthorized access, potentially permitting Denial of SerCheck if you run itEPSS 0.13%Feb 13, 2026
- Critical9.3Hyland OnBase contains an unauthenticated .NET Remoting exposure in the OnBase Workflow Timer Service (Hyland.Core.Workflow.NTService.exe).Check if you run itEPSS 1.31%Feb 13, 2026
- Medium4.3Kanboard is project management software focused on Kanban methodology.Check if you run itEPSS 0.27%Feb 13, 2026
- Medium5.1HP App for Android is potentially vulnerable to cross-site scripting (XSS) when using an outdated version of the application via mobile devices.Check if you run itEPSS 0.15%Feb 13, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec nvmet_tcp_build_pdu_iovec() could walk past cmd->req.sCheck if you run itEPSS 0.48%Feb 13, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() nft_map_catchall_activate() hasCheck if you run itEPSS 1.13%Feb 13, 2026
- High8.8Privilege Defined With Unsafe Actions, Missing Authentication for Critical Function vulnerability in Universal Software Inc.Check if you run itEPSS 0.40%Feb 13, 2026
- Medium5.3A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems.Check if you run itEPSS 0.49%Feb 13, 2026
- High7.3Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas.Check if you run itEPSS 0.63%Feb 13, 2026
- Low3.1Mattermost versions 10.11.x <= 10.11.9 fail to properly validate channel membership at the time of data retrieval which allows a deactivated user to learn team names they should noCheck if you run itEPSS 0.22%Feb 13, 2026
- Medium4.3Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 fail to validate user permissions when creating Jira issues from Mattermost posts, which allows an authenCheck if you run itEPSS 0.27%Feb 13, 2026
- Medium4.3The RegistrationMagic WordPress plugin before 6.0.7.2 checks nonces but not capabilities, allowing for the disclosure of some sensitive data to subscribers and above.Check if you run itEPSS 0.20%Feb 13, 2026
- Medium6.0A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation.Check if you run itEPSS 0.19%Feb 13, 2026
- Medium6.0A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation.Check if you run itEPSS 0.19%Feb 13, 2026
- Medium6.0A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation.Check if you run itEPSS 0.19%Feb 13, 2026
- Medium6.0A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation.Check if you run itEPSS 0.24%Feb 13, 2026
- Medium6.0A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation.Check if you run itEPSS 0.22%Feb 13, 2026
Sort