Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9MiniGal Nano versions 0.3.5 and prior contain a path traversal vulnerability in index.php via the dir parameter.Check if you run itEPSS 0.59%Feb 11, 2026
- Medium5.1MiniGal Nano version 0.3.5 and prior contain a reflected cross-site scripting (XSS) vulnerability in index.php via the dir parameter.Check if you run itEPSS 0.33%Feb 11, 2026
- Low2.3A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory.Check if you run itEPSS 0.11%Feb 11, 2026
- High8.7A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory.Check if you run itEPSS 0.33%Feb 11, 2026
- Medium5.1Kimai 2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts into timesheet descriptions.Check if you run itEPSS 0.30%Feb 11, 2026
- Medium5.1GOautodial 4.0 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the event title parameter.Check if you run itEPSS 0.22%Feb 11, 2026
- Medium5.1WordPress Server Log Viewer 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through unfiltered log file paths.Check if you run itEPSS 0.22%Feb 11, 2026
- Medium4.8Yoast Duplicate-Post WordPress Plugin 3.2.3 contains a persistent cross-site scripting vulnerability in plugin settings parameters.Check if you run itEPSS 0.25%Feb 11, 2026
- Medium5.1InoERP 0.7.2 contains a persistent cross-site scripting vulnerability in the comment section that allows unauthenticated attackers to inject malicious scripts.Check if you run itEPSS 0.27%Feb 11, 2026
- Medium5.1thesystem version 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through multiple server data input fields.Check if you run itEPSS 0.25%Feb 11, 2026
- High8.5ActiveFax Server 6.92 Build 0316 contains an unquoted service path vulnerability in the ActiveFaxServiceNT service that allows local attackers to potentially execute arbitrary codeCheck if you run itEPSS 0.14%Feb 11, 2026
- High8.5Zilab Remote Console Server 3.2.9 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges.Check if you run itEPSS 0.17%Feb 11, 2026
- High8.5Mikogo 5.2.2.150317 contains an unquoted service path vulnerability in the Mikogo-Service Windows service configuration.Check if you run itEPSS 0.24%Feb 11, 2026
- High8.5WorkgroupMail 7.5.1 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code.Check if you run itEPSS 0.17%Feb 11, 2026
- High8.5BlackMoon FTP Server 3.1.2.1731 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges.Check if you run itEPSS 0.17%Feb 11, 2026
- Medium5.1Phraseanet 4.0.3 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through crafted file names during document uploadsCheck if you run itEPSS 0.28%Feb 11, 2026
- High8.6A vulnerability in Plunet Plunet BusinessManager allows unauthorized actions being performed on behalf of privileged users.This issue affects Plunet BusinessManager: 10.15.1Check if you run itEPSS 0.28%Feb 11, 2026
- Low3.6Proctorio Chrome Extension is a browser extension used for online proctoring.Check if you run itEPSS 0.08%Feb 11, 2026
- High7.0Incorrect permission assignment in AMD µProf may allow a local user-privileged attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.Check if you run itEPSS 0.15%Feb 11, 2026
- High7.3A DLL hijacking vulnerability in Vivado could allow a local attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.Check if you run itEPSS 0.17%Feb 11, 2026
- High7.1A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to corrupt memory resulting in loss of integrity, confidentiality, orCheck if you run itEPSS 0.11%Feb 11, 2026
- High7.1A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Memory Interconnect Trusted Agent (XGMI TA)Check if you run itEPSS 0.11%Feb 11, 2026
- Medium6.9Improper input validation in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially resulting in loss of integrity or denial of service.Check if you run itEPSS 0.15%Feb 11, 2026
- High7.0Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidentiality, integrity and availabilityCheck if you run itEPSS 0.15%Feb 11, 2026
- High8.7Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary memory value to functions in the trusted execution environmCheck if you run itEPSS 0.15%Feb 11, 2026
Sort