Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2Kiteworks is a private data network (PDN).Check if you run itEPSS 1.81%Feb 27, 2026
- Critical9.8Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.75%Feb 27, 2026
- Medium6.5HTTP::Session2 versions before 1.12 for Perl for Perl may generate weak session ids using the rand() function.Check if you run itEPSS 0.46%Feb 27, 2026
- Medium5.3calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books.Check if you run itEPSS 0.17%Feb 27, 2026
- Medium6.4calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books.Check if you run itEPSS 0.24%Feb 27, 2026
- Medium6.5Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby.Check if you run itEPSS 0.27%Feb 27, 2026
- Medium6.5Beszel is a server monitoring platform.Check if you run itEPSS 0.55%Feb 27, 2026
- Low2.7Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to obtain limited…Check if you run itEPSS 0.19%Feb 27, 2026
- High8.2A vulnerability in @fastify/middie versions < 9.2.0 can result in authentication/authorization bypass when using path-scoped middleware (for example, app.use('/secret', auth)).Check if you run itEPSS 0.43%Feb 27, 2026
- Medium5.1SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a cross-site request forgery vulnerability in its management interface that allows attackers to indu…Check if you run itEPSS 0.12%Feb 27, 2026
- High7.1SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication vulnerability that allows authenticated users to change account passwords without…Check if you run itEPSS 0.29%Feb 27, 2026
- Medium5.1SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a reflected cross-site scripting vulnerability in the management interface where user input is not p…Check if you run itEPSS 0.18%Feb 27, 2026
- Critical9.3SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a weak session identifier generation vulnerability that allows attackers to forge authenticated sess…Check if you run itEPSS 0.46%Feb 27, 2026
- Medium6.9SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 use the cryptographically broken MD5 hash function for session cookie generation, weakening session security.Check if you run itEPSS 0.14%Feb 27, 2026
- Medium5.0Out-of-bound write vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to terminate cer…Check if you run itEPSS 0.18%Feb 27, 2026
- Medium6.9SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication bypass vulnerability that allows remote attackers to perform unlimited login attem…Check if you run itEPSS 0.36%Feb 27, 2026
- High8.2SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 transmit authentication credentials over unencrypted HTTP, allowing attackers to capture credentials.Check if you run itEPSS 0.22%Feb 27, 2026
- Critical9.3SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a default credentials vulnerability that allows remote attackers to obtain administrative access to…Check if you run itEPSS 0.51%Feb 27, 2026
- High8.3CleverTap Web SDK version 1.15.2 and earlier is vulnerable to DOM-based Cross-Site Scripting (XSS) via window.postMessage in the Visual Builder module.Check if you run itEPSS 0.42%Feb 27, 2026
- High8.3CleverTap Web SDK version 1.15.2 and earlier is vulnerable to Cross-Site Scripting (XSS) via window.postMessage.Check if you run itEPSS 0.21%Feb 27, 2026
- High8.8osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter.Check if you run itEPSS 0.37%Feb 27, 2026
- High8.8osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the produc…Check if you run itEPSS 0.37%Feb 27, 2026
- High8.8osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the review…Check if you run itEPSS 0.37%Feb 27, 2026
- High8.8Homey BNB V4 contains an SQL injection vulnerability in the administration panel login that allows unauthenticated attackers to bypass authentication by injecting SQL…Check if you run itEPSS 0.46%Feb 27, 2026
- High8.8Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'val' parameter.Check if you run itEPSS 0.37%Feb 27, 2026
Sort