Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id' parameter.Check if you run itEPSS 0.37%Feb 27, 2026
- High8.8Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the hosting_id parameter.Check if you run itEPSS 0.45%Feb 27, 2026
- High7.1OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.25%Feb 27, 2026
- Medium6.5OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.45%Feb 27, 2026
- High8.7PublicCMS v5.202506.d and earlier is vulnerable to stored XSS.Check if you run itEPSS 0.40%Feb 27, 2026
- High8.7Multer is a node.js middleware for handling .Check if you run itEPSS 0.74%Feb 27, 2026
- Medium6.5The OpenID Connect (OIDC) authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext in the .universal/authenticat…Check if you run itEPSS 0.19%Feb 27, 2026
- High8.7Multer is a node.js middleware for handling .Check if you run itEPSS 0.74%Feb 27, 2026
- Critical9.3Pro3W CMS if vulnerable to SQL injection attacks.Check if you run itEPSS 0.59%Feb 27, 2026
- High7.5A flaw was found in REXML.Check if you run itEPSS 0.55%Feb 27, 2026
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Signum Technology Promotion and Training Inc.Check if you run itEPSS 0.43%Feb 27, 2026
- Medium4.9The MailArchiver plugin for WordPress is vulnerable to SQL Injection via the ‘logid’ parameter in all versions up to, and including, 4.5.0 due to insufficient escaping…Check if you run itEPSS 0.30%Feb 27, 2026
- Medium4.8PluXml CMS allows a user's session identifier to be set before authentication.Check if you run itEPSS 0.39%Feb 27, 2026
- Medium5.1PluXml CMS is vulnerable to Stored XSS in Static Pages editing functionality.Check if you run itEPSS 0.20%Feb 27, 2026
- Medium5.1PluXml CMS is vulnerable to Stored XSS in file uploading functionality.Check if you run itEPSS 0.20%Feb 27, 2026
- Medium6.9A Hardcoded Email Credentials Saved as Plaintext in Firmware (CWE-256: Plaintext Storage of a Password) vulnerability in Frick Controls Quantum HD version 10.22 and pr…Check if you run itEPSS 0.26%Feb 27, 2026
- Medium5.3The Japanized for WooCommerce plugin for WordPress is vulnerable to Improper Authentication in versions up to, and including, 2.8.4.Check if you run itEPSS 0.46%Feb 27, 2026
- Medium6.5The OVRI Payment plugin for WordPress contains malicious .htaccess files in version 1.7.0.Check if you run itEPSS 0.35%Feb 27, 2026
- High7.5An XML External Entity (XXE) vulnerability allows malicious user to perform Server-Side Request Forgery (SSRF) via crafted XML input containing malicious external enti…Check if you run itEPSS 0.30%Feb 27, 2026
- Critical9.8Improper limitation of a pathname to a restricted directory (Path Traversal) vulnerability in Xerox FreeFlow Core allows unauthorized path traversal leading to RCE.Check if you run itEPSS 0.45%Feb 27, 2026
- High8.8Unauthenticated Remote Code Execution i.e Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows…Check if you run itEPSS 0.71%Feb 27, 2026
- High8.8Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows Code Injection.Check if you run itEPSS 0.45%Feb 27, 2026
- High8.8Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows Code Injection.Check if you run itEPSS 0.45%Feb 27, 2026
- High8.8Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows OS Command Injection.Check if you run itEPSS 1.66%Feb 27, 2026
- UnknownSecurity update for kubevirtOpen the advisoryFeb 27, 2026
Sort