Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.2Fortinet FortiOS LDAP Credentials DisclosurePatch nowKEVEPSS 0.11%Feb 5, 2026
- Medium6.1Cross Site Scripting vulnerability in the "/admin/category/create" endpoint of Microweber 2.0.19.Check if you run itEPSS 0.31%Feb 5, 2026
- Medium6.1Cross Site Scripting vulnerability in the "/admin/order/abandoned" endpoint of Microweber 2.0.19.Check if you run itEPSS 0.31%Feb 5, 2026
- High7.2An issue in ChestnutCMS v.1.5.8 and before allows a remote attacker to execute arbitrary code via the template creation functionCheck if you run itEPSS 0.77%Feb 5, 2026
- High8.8Monstra CMS v3.0.4 contains an arbitrary file upload vulnerability in the Files Manager plugin.Check if you run itEPSS 0.76%Feb 5, 2026
- Medium5.5A path traversal in My Text Editor v1.6.2 allows attackers to cause a Denial of Service (DoS) via writing files to the internal storage.Check if you run itEPSS 0.26%Feb 5, 2026
- Critical9.0Axigen Mail Server before 10.5.57 contains multiple stored Cross-Site Scripting (XSS) vulnerabilities in the WebAdmin interface.Check if you run itEPSS 0.29%Feb 5, 2026
- High8.8Axigen Mail Server before 10.5.57 and 10.6.x before 10.6.26 contains a Cross-Site Request Forgery (CSRF) vulnerability in the WebAdmin interface through improper handling of the _sCheck if you run itEPSS 0.27%Feb 5, 2026
- High8.1Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface.Check if you run itEPSS 0.32%Feb 5, 2026
- Medium5.4Axigen Mail Server before 10.5.57 allows stored Cross-Site Scripting (XSS) in the handling of the timeFormat account preference parameter.Check if you run itEPSS 0.20%Feb 5, 2026
- UnknownSonicWall SonicOS Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.72%Feb 5, 2026
- UnknownSonicWall SonicOS Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)Patch nowKEVEPSS 1.03%Feb 5, 2026
- Medium5.3A vulnerability has been found in WeKan up to 8.20.Check if you run itEPSS 0.31%Feb 4, 2026
- High8.5GCafé 3.0 contains an unquoted service path vulnerability in the gbClientService that allows local attackers to potentially execute arbitrary code with elevated privileges.Check if you run itEPSS 0.17%Feb 4, 2026
- High8.5Shrew Soft VPN Client 2.2.2 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges.Check if you run itEPSS 0.18%Feb 4, 2026
- High8.5Wacom WTabletService 6.6.7-3 contains an unquoted service path vulnerability that allows local attackers to execute malicious code with elevated privileges.Check if you run itEPSS 0.17%Feb 4, 2026
- High8.5Adaware Web Companion version 4.8.2078.3950 contains an unquoted service path vulnerability in the WCAssistantService that allows local users to potentially execute code with elevaCheck if you run itEPSS 0.17%Feb 4, 2026
- High8.5Alps Pointing-device Controller 8.1202.1711.04 contains an unquoted service path vulnerability in the ApHidMonitorService that allows local attackers to execute code with elevatedCheck if you run itEPSS 0.18%Feb 4, 2026
- High8.5NCP Secure Entry Client 9.2 contains an unquoted service path vulnerability in multiple Windows services that allows local users to potentially execute arbitrary code.Check if you run itEPSS 0.18%Feb 4, 2026
- High8.5Studio 5000 Logix Designer 30.01.00 contains an unquoted service path vulnerability in the FactoryTalk Activation Service that allows local users to potentially execute code with eCheck if you run itEPSS 0.21%Feb 4, 2026
- High8.5BartVPN 1.2.2 contains an unquoted service path vulnerability in the BartVPNService that allows local attackers to potentially execute arbitrary code with elevated system privilegeCheck if you run itEPSS 0.17%Feb 4, 2026
- High8.5ProShow Producer 9.0.3797 contains an unquoted service path vulnerability in the ScsiAccess service that allows local attackers to potentially execute arbitrary code.Check if you run itEPSS 0.17%Feb 4, 2026
- High8.5Easy-Hide-IP 5.0.0.3 contains an unquoted service path vulnerability in the EasyRedirect service that allows local attackers to potentially execute arbitrary code.Check if you run itEPSS 0.17%Feb 4, 2026
- High8.5TexasSoft CyberPlanet 6.4.131 contains an unquoted service path vulnerability in the CCSrvProxy service that allows local attackers to execute arbitrary code.Check if you run itEPSS 0.17%Feb 4, 2026
- High8.5NETGATE Data Backup 3.0.620 contains an unquoted service path vulnerability in its NGDatBckpSrv Windows service configuration.Check if you run itEPSS 0.36%Feb 4, 2026
Sort