Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3Heap-based buffer overflow vulnerability in the image module.Check if you run itEPSS 0.10%Feb 6, 2026
- Low2.3A vulnerability has been found in Sanluan PublicCMS up to 4.0.202506.d/5.202506.d/6.202506.d.Check if you run itEPSS 0.36%Feb 6, 2026
- Critical9.2Access control settings for forum post custom fields are not applied to the JSON output type, leading to an ACL violation vector an information disclosureCheck if you run itEPSS 0.41%Feb 6, 2026
- Medium5.3A flaw has been found in SourceCodester Gas Agency Management System 1.0.Check if you run itEPSS 0.28%Feb 6, 2026
- Medium6.4The Employee Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form_title' parameter in the shortcode in all versions up to, and including, 1.2.1Check if you run itEPSS 0.26%Feb 6, 2026
- Medium5.3A vulnerability was detected in abhiphile fermat-mcp up to 47f11def1cd37e45dd060f30cdce346cbdbd6f0a.Check if you run itEPSS 0.46%Feb 6, 2026
- Medium6.4The Tune Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via CSV import in all versions up to, and including, 1.6.3.Check if you run itEPSS 0.26%Feb 6, 2026
- Medium6.4The Orange Confort+ accessibility toolbar for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'style' parameter of the ocplus_button shortcode iCheck if you run itEPSS 0.26%Feb 6, 2026
- Medium6.4The Docus – YouTube Video Playlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'docusplaylist' shortcode in all versions up to, and including, 1.0.6 dCheck if you run itEPSS 0.26%Feb 6, 2026
- Medium5.1A vulnerability was found in DCN DCME-320 up to 20260121.Check this weekEPSS 19.48%Feb 6, 2026
- Medium5.6A reflected cross-site scripting (XSS) vulnerability in the PDF export functionality of the TYDAC AG MAP+ solution allows unauthenticated attackers to craft a malicious URL, that iCheck if you run itEPSS 0.30%Feb 6, 2026
- Medium4.8A flaw has been found in micropython up to 1.27.0.Check if you run itEPSS 0.22%Feb 6, 2026
- Medium4.8A vulnerability was detected in libuvc up to 0.0.7.Check if you run itEPSS 0.21%Feb 6, 2026
- Medium4.8A security vulnerability has been detected in oatpp up to 1.3.1.Check if you run itEPSS 0.17%Feb 6, 2026
- Medium4.8A flaw has been found in mruby up to 3.4.0.Check if you run itEPSS 0.18%Feb 6, 2026
- Medium6.9A vulnerability was detected in kalyan02 NanoCMS up to 0.4.Check if you run itEPSS 0.43%Feb 6, 2026
- Medium5.3A security vulnerability has been detected in isaacwasserman mcp-vegalite-server up to 16aefed598b8cd897b78e99b907f6e2984572c61.Check if you run itEPSS 0.27%Feb 6, 2026
- Medium6.9A weakness has been identified in Free5GC up to 4.1.0.Check if you run itEPSS 0.63%Feb 6, 2026
- High8.8A security issue was discovered in ingress-nginx where the Ingress annotation can be used to inject configuration into nginx.Check if you run itEPSS 0.52%Feb 6, 2026
- Medium6.9A security flaw has been discovered in Free5GC up to 4.1.0.Check if you run itEPSS 0.63%Feb 6, 2026
- Medium4.3The Timeline Block – Beautiful Timeline Builder for WordPress (Vertical & Horizontal Timelines) plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versioCheck if you run itEPSS 0.21%Feb 6, 2026
- Critical9.8Fortinet FortiClient EMS SQL Injection VulnerabilityPatch nowKEVEPSS 97.73%Feb 6, 2026
- Medium6.9A vulnerability was identified in Free5GC up to 4.1.0.Check if you run itEPSS 0.59%Feb 6, 2026
- Medium6.9A vulnerability was determined in Free5GC up to 4.1.0.Check if you run itEPSS 0.63%Feb 6, 2026
- Medium6.9A vulnerability was found in Edimax BR-6208AC 2_1.02.Check if you run itEPSS 0.66%Feb 6, 2026
Sort