Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low1.2An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central.Check if you run itEPSS 0.52%Feb 11, 2026
- Low1.2A NULL pointer dereference vulnerability has been reported to affect Qsync Central.Check if you run itEPSS 0.62%Feb 11, 2026
- Low1.2A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.Check if you run itEPSS 0.44%Feb 11, 2026
- Medium5.2A path traversal vulnerability has been reported to affect File Station 5.Check if you run itEPSS 0.66%Feb 11, 2026
- Low1.3An uncontrolled resource consumption vulnerability has been reported to affect File Station 5.Check if you run itEPSS 0.59%Feb 11, 2026
- Low1.3A path traversal vulnerability has been reported to affect File Station 5.Check if you run itEPSS 0.38%Feb 11, 2026
- Low1.3A path traversal vulnerability has been reported to affect File Station 5.Check if you run itEPSS 0.40%Feb 11, 2026
- Critical9.2A link following vulnerability has been reported to affect several QNAP operating system versions.Check if you run itEPSS 0.70%Feb 11, 2026
- Low1.3A path traversal vulnerability has been reported to affect File Station 5.Check if you run itEPSS 0.49%Feb 11, 2026
- Low1.3A path traversal vulnerability has been reported to affect Qsync Central.Check if you run itEPSS 0.64%Feb 11, 2026
- Low1.3A path traversal vulnerability has been reported to affect File Station 6.Check if you run itEPSS 0.64%Feb 11, 2026
- High8.3Cleartext Transmission of Sensitive Information vulnerability in Pan Software & Information Technologies Ltd.Check if you run itEPSS 0.14%Feb 11, 2026
- Low3.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could haveCheck if you run itEPSS 0.20%Feb 11, 2026
- Low3.7GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could haveCheck if you run itEPSS 0.30%Feb 11, 2026
- Low3.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an authenticated uCheck if you run itEPSS 0.20%Feb 11, 2026
- Medium6.9Exposure of Sensitive System Information to an Unauthorized Actor vulnerability in Microcom ZeusWeb allows Web Application Fingerprinting of sensitive data.Check if you run itEPSS 0.44%Feb 11, 2026
- Medium5.1An attacker with access to the web application ZeusWeb of the provider Microcom (in this case, registration is not necessary, but the action must be performed) who has the vulnerabCheck if you run itEPSS 0.26%Feb 11, 2026
- Medium5.1An attacker with access to the web application ZeusWeb of the provider Microcom (in this case, registration is not necessary, but the action must be performed) who has the vulnerabCheck if you run itEPSS 0.26%Feb 11, 2026
- Medium4.8An attacker with access to the web application ZeusWeb of the provider Microcom (in this case, registration is required) who has the vulnerable software could introduce arbitrary JCheck if you run itEPSS 0.26%Feb 11, 2026
- High8.2Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vadi Corporate Information Systems Ltd.Check if you run itEPSS 0.26%Feb 11, 2026
- Medium6.4The Flask Micro code-editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's codeflask shortcode in all versions up to, and including, 1.0.0 due tCheck if you run itEPSS 0.25%Feb 11, 2026
- Medium5.3The WaMate Confirm – Order Confirmation plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.0.1.Check if you run itEPSS 0.32%Feb 11, 2026
- Medium4.4The Category Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tag-image' parameter in all versions up to, and including, 2.0 due to insufficient inpCheck if you run itEPSS 0.27%Feb 11, 2026
- Medium6.4The OpenPOS Lite – Point of Sale for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' parameter of the order_qrcode shortcode in all veCheck if you run itEPSS 0.28%Feb 11, 2026
- Medium6.4The HTML Tag Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 1.1 due to insufficientCheck if you run itEPSS 0.28%Feb 11, 2026
Sort