Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0A flaw was found in Keycloak.Check if you run itEPSS 0.17%Feb 10, 2026
- High7.3A flaw has been found in Artifex MuPDF up to 1.26.1 on Windows.Check if you run itEPSS 0.14%Feb 10, 2026
- High8.5A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All versions < V2.15.2.1).Check if you run itEPSS 0.26%Feb 10, 2026
- High8.5A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP2).Check if you run itEPSS 0.26%Feb 10, 2026
- High7.3A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512).Check if you run itEPSS 0.18%Feb 10, 2026
- High7.3A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512).Check if you run itEPSS 0.15%Feb 10, 2026
- High7.3A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512).Check if you run itEPSS 0.15%Feb 10, 2026
- High7.3A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512).Check if you run itEPSS 0.15%Feb 10, 2026
- High7.3A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512).Check if you run itEPSS 0.15%Feb 10, 2026
- High7.3A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512).Check if you run itEPSS 0.18%Feb 10, 2026
- High7.3A vulnerability has been identified in NX (All versions < V2512), NX (Managed Mode) (All versions < V2512).Check if you run itEPSS 0.15%Feb 10, 2026
- Medium6.2A vulnerability has been identified in Polarion V2404 (All versions < V2404.5), Polarion V2410 (All versions < V2410.2).Check if you run itEPSS 0.30%Feb 10, 2026
- Medium6.3A vulnerability has been identified in syngo.plaza VB30E (All versions < VB30E_HF07).Check if you run itEPSS 0.30%Feb 10, 2026
- High8.8Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in Apache HertzBeat.Check if you run itEPSS 0.75%Feb 10, 2026
- Critical9.8Affected Products and Versions * Apache Druid * Affected Versions: 0.17.0 through 35.x (all versions prior to 36.0.0) * Prerequisites: * druid-basic-security extension enabled * LDCheck if you run itEPSS 1.07%Feb 10, 2026
- High7.2The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via double HTML-entity encoding in all versions up to, and including, 1.32.0.Check if you run itEPSS 0.30%Feb 10, 2026
- High7.5The Ninja Forms plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.14.0.Check if you run itEPSS 0.39%Feb 10, 2026
- Low1.0Observable Timing Discrepancy vulnerability in Apache Shiro.Check if you run itEPSS 0.23%Feb 10, 2026
- High8.6Ivanti Endpoint Manager (EPM) Authentication Bypass VulnerabilityPatch nowKEVEPSS 88.33%Feb 10, 2026
- Medium5.9Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityPatch nowKEVEPSS 29.50%Feb 10, 2026
- Critical9.8Server-Side Request Forgery (SSRF) vulnerability in Teknolist Computer Systems Software Publishing Industry and Trade Inc.Check if you run itEPSS 0.36%Feb 10, 2026
- Medium5.3The WCFM Marketplace – Multivendor Marketplace for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.7.0.Check if you run itEPSS 0.33%Feb 10, 2026
- Medium5.1AgentFlow developed by Flowring has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to inject persistent JavaScript codes that are executed inCheck if you run itEPSS 0.20%Feb 10, 2026
- Medium5.1AgentFlow developed by Flowring has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browseCheck if you run itEPSS 0.24%Feb 10, 2026
- High8.7Agentflow developed by Flowring has an Arbitrary File Upload vulnerability, allowing authenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbiCheck if you run itEPSS 0.52%Feb 10, 2026
Sort