Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2Dell Update Package (DUP) Framework, versions 23.12.00 through 24.12.00, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability.Check if you run itEPSS 0.11%Feb 12, 2026
- High7.8Dell iDRAC Service Module (iSM) for Windows, versions prior to 6.0.3.1, and Dell iDRAC Service Module (iSM) for Linux, versions prior to 5.4.1.1, contain an Improper Access ControlCheck if you run itEPSS 0.11%Feb 12, 2026
- High8.8The serialize function used to compile MDX in next-mdx-remote is vulnerable to arbitrary code execution due to insufficient sanitization of MDX content.Check if you run itEPSS 0.64%Feb 12, 2026
- Critical9.8The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 6.0.12.Check if you run itEPSS 0.65%Feb 12, 2026
- Medium5.4grub-btrfs through 2026-01-31 (on Arch Linux and derivative distributions) allows initramfs OS command injection because it does not sanitize the $root parameter to resolve_device(Check if you run itEPSS 1.35%Feb 12, 2026
- Critical9.8CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface (/user/list) via the departmentIds parameter.Check if you run itEPSS 0.38%Feb 12, 2026
- High7.5An issue in halo v.2.22.4 and before allows a remote attacker to cause a denial of service via a crafted payload to the public comment submission endpointCheck if you run itEPSS 0.52%Feb 12, 2026
- Medium6.1lty628 aidigu v1.9.1 is vulnerable to Cross Site Scripting (XSS) exists in the /setting/ page where the "intro" field is not properly sanitized or escaped.Check if you run itEPSS 0.24%Feb 12, 2026
- Critical9.8webfsd 1.21 is vulnerable to a Buffer Overflow via a crafted request.Check if you run itEPSS 0.52%Feb 12, 2026
- Medium5.5A cross-site scripting (XSS) vulnerability in the Item Kits function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payloCheck if you run itEPSS 0.22%Feb 12, 2026
- High7.5p2r3 Bareiron commit: 8e4d4020d is vulnerable to Buffer Overflow, which allows unauthenticated remote attackers to cause a denial of service via a packet sent to the server.Check if you run itEPSS 0.46%Feb 12, 2026
- High7.5p2r3 bareiron commit: 8e4d4020d contains an Out-of-bounds Read, which allows unauthenticated remote attackers to get relative information leakage via a packet sent to the serverCheck if you run itEPSS 0.39%Feb 12, 2026
- Medium4.3An issue in the "My Details" user profile functionality of Ideagen Q-Pulse 7.1.0.32 allows an authenticated user to view other users' profile information by modifying the objectKeyCheck if you run itEPSS 0.19%Feb 12, 2026
- Critical9.0Cross Site Request Forgery vulnerability in Dolibarr ERP & CRM v.22.0.9 allows a remote attacker to escalate privileges via the notes field in perms.php NOTE: this is disputed by aCheck if you run itEPSS 0.17%Feb 12, 2026
- High7.5A heap buffer overflow in the processRequest function of Open TFTP Server MultiThreaded v1.7 allows attackers to cause a Denial of Service (DoS) via a crafted DATA packet.Check if you run itEPSS 0.46%Feb 12, 2026
- High7.5A stack overflow in the ZBarcode_Encode function of Monkeybread Software MBS DynaPDF Plugin v21.3.1.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.Check if you run itEPSS 0.38%Feb 12, 2026
- High7.8An issue in filosoft Comerc.32 Commercial Invoicing v.16.0.0.3 allows a local attacker to execute arbitrary code via the comeinst.exe fileCheck if you run itEPSS 0.15%Feb 12, 2026
- High8.8In Infoblox NIOS through 9.0.7, insecure deserialization can result in remote code execution.Check if you run itEPSS 0.65%Feb 12, 2026
- High7.7In Infoblox NIOS through 9.0.7, a High-Privileged User Can Trigger an Arbitrary File Write via the Account Creation Mechanism.Check if you run itEPSS 0.29%Feb 12, 2026
- Medium6.5npm @farmfe/core before 1.7.6 is Missing Origin Validation in WebSocket.Check if you run itEPSS 0.22%Feb 12, 2026
- Medium5.5A privacy issue was addressed with improved handling of temporary files.Check if you run itEPSS 0.14%Feb 11, 2026
- High8.8The issue was addressed with improved memory handling.Check if you run itEPSS 0.36%Feb 11, 2026
- High7.5The issue was addressed with improved memory handling.Check if you run itEPSS 0.71%Feb 11, 2026
- Medium4.6The issue was addressed with improved memory handling.Check if you run itEPSS 0.27%Feb 11, 2026
- Medium5.5A parsing issue in the handling of directory paths was addressed with improved path validation.Check if you run itEPSS 0.23%Feb 11, 2026
Sort