Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.5JumpStart 0.6.0.0 contains an unquoted service path vulnerability in the jswpbapi service running with LocalSystem privileges.Check if you run itEPSS 0.15%Feb 6, 2026
- High8.5SecurOS Enterprise 10.2 contains an unquoted service path vulnerability in the SecurosCtrlService that allows local users to potentially execute code with elevated privileges.Check if you run itEPSS 0.15%Feb 6, 2026
- High7.1TheJshen ContentManagementSystem 1.04 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'id' GET parameter.Check if you run itEPSS 0.25%Feb 6, 2026
- High8.5Acer Launch Manager 6.1.7600.16385 contains an unquoted service path vulnerability in the DsiWMIService that allows local users to potentially execute code with elevated privilegesCheck if you run itEPSS 0.15%Feb 6, 2026
- Medium5.1Millhouse-Project 1.414 contains a persistent cross-site scripting vulnerability in the comment submission functionality that allows attackers to inject malicious scripts.Check if you run itEPSS 0.26%Feb 6, 2026
- High7.1thejshen Globitek CMS 1.4 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'id' GET parameter.Check if you run itEPSS 0.25%Feb 6, 2026
- High7.1RimbaLinux AhadPOS 1.11 contains a SQL injection vulnerability in the 'alamatCustomer' parameter that allows attackers to manipulate database queries through crafted POST requests.Check if you run itEPSS 0.25%Feb 6, 2026
- High7.1html5_snmp 1.11 contains multiple SQL injection vulnerabilities that allow attackers to manipulate database queries through Router_ID and Router_IP parameters.Check if you run itEPSS 0.44%Feb 6, 2026
- Medium5.1html5_snmp 1.11 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through the 'Remark' parameter in add_router_operation.phCheck if you run itEPSS 0.25%Feb 6, 2026
- High8.5Alps HID Monitor Service 8.1.0.10 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated privileges.Check if you run itEPSS 0.17%Feb 6, 2026
- High8.5Wondershare Application Framework Service 2.4.3.231 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevatedCheck if you run itEPSS 0.15%Feb 6, 2026
- Medium6.9A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be.Check if you run itEPSS 0.56%Feb 6, 2026
- High7.1Infor SyteLine ERP uses hard-coded static cryptographic keys to encrypt stored credentials, including user passwords, database connection strings, and API keys.Check if you run itEPSS 0.11%Feb 6, 2026
- Medium5.9MuPDF versions 1.23.0 through 1.27.0 contain a double-free vulnerability in fz_fill_pixmap_from_display_list() when an exception occurs during display list rendering.Check if you run itEPSS 0.53%Feb 6, 2026
- High7.7Mattermost Confluence plugin version <1.7.0 fails to properly escape user-controlled display names in HTML template rendering which allows authenticated Confluence users with malicCheck if you run itEPSS 0.22%Feb 6, 2026
- Medium6.9A vulnerability was detected in SourceCodester Medical Center Portal Management System 1.0.Check if you run itEPSS 0.39%Feb 6, 2026
- Critical9.9BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection VulnerabilityPatch nowKEVEPSS 93.85%Feb 6, 2026
- Medium6.9A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01.Check if you run itEPSS 1.09%Feb 6, 2026
- High8.3Local privilege escalation vulnerability via insecure temporary batch file execution in ESET Management AgentCheck if you run itEPSS 0.13%Feb 6, 2026
- Low1.1Insufficient escaping of unicode characters in query log in Neo4j Enterprise and Community editions prior to 2026.01 can lead to XSS if the user opens the logs in a tool that treatCheck if you run itEPSS 0.24%Feb 6, 2026
- Medium6.9A weakness has been identified in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01.Check if you run itEPSS 1.09%Feb 6, 2026
- Medium6.9A security flaw has been discovered in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01.Check if you run itEPSS 1.09%Feb 6, 2026
- Medium6.9A flaw has been found in itsourcecode School Management System 1.0.Check if you run itEPSS 0.39%Feb 6, 2026
- Critical9.3A vulnerability was detected in IP-COM W30AP up to 1.0.0.11(1340).Check if you run itEPSS 4.80%Feb 6, 2026
- Medium6.4The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the block attribute in all versions uCheck if you run itEPSS 0.22%Feb 6, 2026
Sort