Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8nanotar through 0.2.0 has a path traversal vulnerability in parseTar() and parseTarGzip() that allows remote attackers to write arbitrary files outside the intended extraction direCheck if you run itEPSS 0.93%Feb 11, 2026
- High7.5ajv: ReDoS via $data referenceCheck if you run itEPSS 0.54%Feb 11, 2026
- Critical9.8DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default.Check if you run itEPSS 0.60%Feb 11, 2026
- High8.1A race condition vulnerability exists in MedusaJS Medusa v2.12.2 and earlier in the registerUsage() function of the promotion module.Check if you run itEPSS 0.40%Feb 11, 2026
- Critical9.8Weak Security in the PF-50 1.2 keyfob of PGST PG107 Alarm System 1.25.05.hf allows attackers to compromise access control via a code replay attack.Check if you run itEPSS 0.39%Feb 11, 2026
- High8.8An issue was discovered in Pacom Unison Client 5.13.1.Check if you run itEPSS 0.76%Feb 11, 2026
- High8.1A missing authentication mechanism in the web management API components of Shenzhen Zhibotong Electronics ZBT WE2001 23.09.27 allows unauthenticated attackers on the local networkCheck if you run itEPSS 0.28%Feb 11, 2026
- Medium6.5A lack of session validation in the web API component of Shenzhen Zhibotong Electronics ZBT WE2001 23.09.27 allows remote unauthenticated attackers to access administrative informaCheck if you run itEPSS 0.34%Feb 11, 2026
- Critical10.0A path traversal vulnerability in the check_token function of Shenzhen Zhibotong Electronics ZBT WE2001 23.09.27 allows remote attackers to bypass authentication and perform adminiCheck if you run itEPSS 0.81%Feb 11, 2026
- Medium5.3A path-traversal vulnerability in the logout functionality of Shenzhen Zhibotong Electronics ZBT WE2001 23.09.27 allows remote attackers to delete arbitrary files on the host by suCheck if you run itEPSS 0.44%Feb 11, 2026
- High8.8Unrestricted Upload of File with Dangerous Type vulnerabilities exist in the rich text editor and document manage components in CIPPlanner CIPAce before 9.17.Check if you run itEPSS 0.34%Feb 11, 2026
- High8.8Vulnerabilities in the My Account and User Management components in CIPPlanner CIPAce before 9.17 allows attackers to escalate their access levels.Check if you run itEPSS 0.28%Feb 11, 2026
- Medium4.3A Use of Single-factor Authentication vulnerability in the Authentication component of CIPPlanner CIPAce before 9.17 allows attackers to bypass a protection mechanism.Check if you run itEPSS 0.28%Feb 11, 2026
- High7.5Vulnerabilities in the File Download and Get File handler components in CIPPlanner CIPAce before 9.17 allow attackers to download unauthorized files.Check if you run itEPSS 0.28%Feb 11, 2026
- High7.5An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the admin parameter.Check if you run itEPSS 0.61%Feb 11, 2026
- Medium5.3An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the Command execution function.Check if you run itEPSS 0.63%Feb 11, 2026
- Medium5.3An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the /api/users endpoint.Check if you run itEPSS 0.46%Feb 11, 2026
- High7.5An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the api parameter of the oauth, amazon_sns, export endpoints.Check if you run itEPSS 0.59%Feb 11, 2026
- High8.7thecontrolgroup voyager Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.73%Feb 11, 2026
- Medium6.9JUNG Smart Panel KNX firmware version L1.12.22 and prior contain an unauthenticated path traversal vulnerability in the embedded web interface.Check if you run itEPSS 0.78%Feb 10, 2026
- Medium6.9DoraCMS version 3.1 and prior contains a server-side request forgery (SSRF) vulnerability in its UEditor remote image fetch functionality.Check if you run itEPSS 0.33%Feb 10, 2026
- Low3.7LangChain is a framework for building agents and LLM-powered applications.Check if you run itEPSS 0.42%Feb 10, 2026
- High8.2cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.Check if you run itEPSS 0.38%Feb 10, 2026
- Medium6.5AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows.Check if you run itEPSS 0.53%Feb 10, 2026
- Medium6.7The ZOLL ePCR IOS application reflects unsanitized user input into a WebView.Check if you run itEPSS 0.20%Feb 10, 2026
Sort