Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.0A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation.Check if you run itEPSS 0.20%Feb 13, 2026
- Medium6.2Summary A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the AI Playground's OAuth callback handler.Check if you run itEPSS 0.41%Feb 13, 2026
- High7.7A vulnerability in the certificate validation logic may allow applications to accept untrusted or improperly validated server identities during TLS communication.Check if you run itEPSS 0.24%Feb 13, 2026
- Low2.0A permissive web security configuration may allow cross-origin restrictions enforced by modern browsers to be bypassed under specific circumstances.Check if you run itEPSS 0.38%Feb 13, 2026
- High8.8Google Chromium CSS Use-After-Free VulnerabilityPatch nowKEVEPSS 54.46%Feb 13, 2026
- High7.5A Denial of Service (DoS) vulnerability was discovered in the TON Lite Server before v2024.09.Check if you run itEPSS 0.40%Feb 13, 2026
- High7.5A State Pollution vulnerability was discovered in the TON Virtual Machine (TVM) before v2025.04.Check if you run itEPSS 0.55%Feb 13, 2026
- High7.5A Stack Overflow vulnerability was discovered in the TON Virtual Machine (TVM) before v2024.10.Check if you run itEPSS 0.67%Feb 13, 2026
- High7.5A Null Pointer Dereference vulnerability exists in the TON Virtual Machine (TVM) within the TON Blockchain before v2025.06.Check if you run itEPSS 0.61%Feb 13, 2026
- High8.8LavaLite CMS 10.1.0 is vulnerable to Incorrect Access Control.Check if you run itEPSS 0.48%Feb 13, 2026
- High7.5An improper input validation and protocol compliance vulnerability in free5GC v4.0.1 allows remote attackers to cause a denial of service.Check if you run itEPSS 0.40%Feb 13, 2026
- High7.5A heap buffer overflow vulnerability in the UPF component of free5GC v4.0.1 allows remote attackers to cause a denial of service via a crafted PFCP Session Modification Request.Check if you run itEPSS 0.40%Feb 13, 2026
- High7.5An array index out of bounds vulnerability in the AMF component of free5GC v4.0.1 allows remote attackers to cause a denial of service via a crafted 5GS Mobile Identity in a NAS ReCheck if you run itEPSS 0.40%Feb 13, 2026
- Medium6.5A cross-site scripting (XSS) vulnerability in the item management and sales invoice function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via iCheck if you run itEPSS 0.20%Feb 13, 2026
- Medium6.5A cross-site scripting (XSS) vulnerability in the Generate Item Barcode function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a cCheck if you run itEPSS 0.20%Feb 13, 2026
- High7.4An issue in OpenSourcePOS v3.4.1 allows attackers to execute arbitrary code via returning a crafted AJAX response.Check if you run itEPSS 0.41%Feb 13, 2026
- Medium6.5A cross-site scripting (XSS) vulnerability in the Customers function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payloCheck if you run itEPSS 0.20%Feb 13, 2026
- Critical10.0A zip slip vulnerability in the /DesignTools/SkinList.aspx endpoint of MojoPortal CMS v2.9.0.1 allows attackers to execute arbitrary commands via uploading a crafted zip file.Check if you run itEPSS 0.70%Feb 13, 2026
- Critical9.8A SQL Injection vulnerability in the Advanced Popup Creator (advancedpopupcreator) module for PrestaShop 1.1.26 through 1.2.6 (Fixed in version 1.2.7) allows remote unauthenticatedCheck if you run itEPSS 0.43%Feb 13, 2026
- Medium6.2An issue in IObit Unlocker v1.3.0.11 allows attackers to cause a Denial of Service (DoS) via a crafted request.Check if you run itEPSS 0.19%Feb 13, 2026
- Medium6.0Improper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow an attacker with access to a guest virtual machine to potentially perform a denialCheck if you run itEPSS 0.34%Feb 12, 2026
- High7.3WWW::OAuth 1.000 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.Check if you run itEPSS 0.30%Feb 12, 2026
- Medium5.1Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool.Check if you run itEPSS 0.31%Feb 12, 2026
- High8.8PRO-7070 Hazır Profesyonel Web Sitesi version 1.0 contains an authentication bypass vulnerability in the administration panel login page.Check if you run itEPSS 0.39%Feb 12, 2026
- High8.6ClamAV versions prior to 0.103.0-rc contain a vulnerability in function name processing through the ClamBC bytecode interpreter that allows attackers to manipulate bytecode functioCheck if you run itEPSS 0.19%Feb 12, 2026
Sort