Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.6free5gc UDM provides Unified Data Management (UDM) for free5GC, an open-source project for 5th generation (5G) mobile core networks.Check if you run itEPSS 0.46%Feb 24, 2026
- Medium5.1Bludit version 3.16.1 contains a cross-site request forgery (CSRF) vulnerability in the /admin/uninstall-plugin/ and /admin/install-theme/ endpoints.Check if you run itEPSS 0.24%Feb 23, 2026
- Medium6.6free5GC is an open-source project for 5th generation (5G) mobile core networks.Check if you run itEPSS 0.66%Feb 23, 2026
- Low2.7free5GC go-upf is the User Plane Function (UPF) implementation for 5G networks that is part of the free5GC project.Check if you run itEPSS 0.61%Feb 23, 2026
- Low2.7free5GC is an open-source project for 5th generation (5G) mobile core networks.Check if you run itEPSS 0.41%Feb 23, 2026
- Medium5.5A vulnerability has been found in erzhongxmu JEEWMS 3.7.Check if you run itEPSS 0.60%Feb 23, 2026
- Medium5.1Aruba HiSpeed Cache (aruba-hispeed-cache) WordPress plugin versions prior to 3.0.5 contain a cross-site request forgery (CSRF) vulnerability affecting multiple adminis…Check if you run itEPSS 0.25%Feb 23, 2026
- Critical9.3ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor (elementskit-lite) WordPress plugin versions prior to 3.7.9 expose the REST endpoint /…Check if you run itEPSS 1.24%Feb 23, 2026
- High7.5Valkey is a distributed key-value database.Check if you run itEPSS 0.73%Feb 23, 2026
- Medium6.1Stored Cross-Site Scripting (XSS) was found in the /admin/edit_user.php page of Society Management System Portal V1.0, which allows remote attackers to inject and stor…Check if you run itEPSS 0.45%Feb 23, 2026
- Medium5.1Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a cross-site request forgery (CSRF) vulnerability in the web-based administrative interface.Check if you run itEPSS 0.18%Feb 23, 2026
- High7.4An issue pertaining to CWE-295: Improper Certificate Validation was discovered in YMFE yapi v1.12.0.Check if you run itEPSS 0.19%Feb 23, 2026
- High7.4An issue pertaining to CWE-295: Improper Certificate Validation was discovered in jxcore jxm master.Check if you run itEPSS 0.19%Feb 23, 2026
- Low2.1A security flaw has been discovered in Tiandy Video Surveillance System 视频监控平台 7.17.0.Check if you run itEPSS 0.40%Feb 23, 2026
- Critical9.3SQL injection vulnerability in Infoticketing.Check if you run itEPSS 0.36%Feb 23, 2026
- Medium4.0Akamai Ghost on Akamai CDN edge servers before 2026-02-06 mishandles processing of custom hop-by-hop HTTP headers, where an incoming request containing the header "Con…Check if you run itEPSS 0.30%Feb 23, 2026
- Critical9.8SQL Injection vulnerability in the /api/integrations/getintegrations endpoint of Order Up Online Ordering System 1.0 allows an unauthenticated attacker to access sensi…Check if you run itEPSS 0.41%Feb 23, 2026
- High8.8Web Ofisi Rent a Car v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the…Check if you run itEPSS 0.30%Feb 22, 2026
- High8.8Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code thro…Check if you run itEPSS 0.42%Feb 22, 2026
- High8.8Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code thro…Check if you run itEPSS 0.42%Feb 22, 2026
- High8.8Web Ofisi Firma Rehberi v1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through G…Check if you run itEPSS 0.56%Feb 22, 2026
- High8.8Web Ofisi Firma v13 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'oz'…Check if you run itEPSS 0.46%Feb 22, 2026
- High8.8Web Ofisi Emlak v2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'ara'…Check if you run itEPSS 0.54%Feb 22, 2026
- High8.8Web Ofisi E-Ticaret v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'a' parameter.Check if you run itEPSS 0.46%Feb 22, 2026
- Medium5.5A flaw has been found in Vaelsys 4.1.0.Check if you run itEPSS 8.09%Feb 22, 2026