Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Improper Neutralization of Special Elements used in a Command ('Command Injection') in Owl opds 2.2.0.4 allows Command Injection via a crafted network request.Check if you run itEPSS 1.98%Feb 20, 2026
- High7.2Server-Side Request Forgery (SSRF) vulnerability in Laborator Oxygen oxygen allows Server Side Request Forgery.This issue affects Oxygen: from n/a through <= 6.0.8.Check if you run itEPSS 0.22%Feb 20, 2026
- Critical9.5The vulnerability was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s com_ajax entry point.Check if you run itEPSS 1.75%Feb 20, 2026
- Medium5.1LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Check if you run itEPSS 0.37%Feb 20, 2026
- Medium5.1LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Check if you run itEPSS 0.37%Feb 20, 2026
- Medium6.9OpenClaw is a personal AI assistant.Check if you run itEPSS 0.17%Feb 20, 2026
- UnknownCross-site Request Forgery (CSRF) vulnerabilityOpen the advisoryFeb 18, 2026
- Unknownmcpjam inspector Missing Authentication for Critical FunctionPatch nowKEVEPSS 67.52%Feb 18, 2026
- High7.9rocketsoftware trufusion_enterprise Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.28%Feb 17, 2026
- UnknownXStream XStream Deserialization of Untrusted DataPatch nowKEVEPSS 11.38%Feb 14, 2026
- High8.7Soliton Systems K.K FileZen OS Command Injection VulnerabilityPatch nowKEVEPSS 5.25%Feb 12, 2026
- Unknownaxllent mailpit Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.81%Feb 11, 2026
- Medium5.5Safetica Kernel Driver Privileged Termination VulnerabilityPatch nowKEVEPSS 0.26%Feb 11, 2026
- High7.5ajv: ReDoS via $data referenceCheck if you run itEPSS 0.55%Feb 11, 2026
- Unknownastro astro Storage of File with Sensitive Data Under Web RootPatch nowKEVEPSS 1.54%Feb 11, 2026
- Medium5.9Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityPatch nowKEVEPSS 29.50%Feb 10, 2026
- Critical9.8Fortinet FortiClient EMS SQL Injection VulnerabilityPatch nowKEVEPSS 93.87%Feb 6, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.14%Feb 5, 2026
- UnknownSonicWall SonicOS Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.72%Feb 5, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list When the parameter pmac_id_valid a…Check if you run itEPSS 0.15%Feb 4, 2026
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.34%Feb 4, 2026
- UnknownCisco finesse Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 22.64%Feb 4, 2026
- Unknownszuray iptv\/h.264_video_encoder_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 23.64%Feb 4, 2026
- Unknowncozmoslabs profile_builder Improper Privilege ManagementPatch nowKEVEPSS 0.54%Feb 3, 2026
- Unknownarticatech artica_proxy Relative Path TraversalPatch nowKEVEPSS 44.58%Feb 2, 2026
Sort