Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low1.9A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0.Check if you run itEPSS 0.27%Feb 25, 2026
- High7.4A security vulnerability has been detected in Tenda F453 1.0.0.3.Check if you run itEPSS 0.72%Feb 25, 2026
- Medium4.6URLs containing percent-encoded slashes ( or ) can trick wcurl into saving the output file outside of the current directory without the user explicitly asking for it.Check if you run itEPSS 0.42%Feb 25, 2026
- High7.4A weakness has been identified in Tenda F453 1.0.0.3.Check if you run itEPSS 3.72%Feb 25, 2026
- High7.4A vulnerability was identified in Tenda F453 1.0.0.3.Check if you run itEPSS 0.72%Feb 25, 2026
- Critical9.2The FTP Backup on the ADM does not properly sanitize filenames received from the FTP server when parsing directory listings.Check if you run itEPSS 0.57%Feb 25, 2026
- Medium5.5A vulnerability was detected in itsourcecode College Management System 1.0.Check if you run itEPSS 0.45%Feb 25, 2026
- High8.3The FTP Backup on the ADM will not properly strictly enforce TLS certificate verification while connecting to an FTP server using FTPES/FTPS.Check if you run itEPSS 0.19%Feb 25, 2026
- Low2.1A weakness has been identified in itsourcecode College Management System 1.0.Check if you run itEPSS 0.32%Feb 25, 2026
- High8.6changedetection.io is a free open source web page change detection tool.Check if you run itEPSS 0.50%Feb 25, 2026
- Medium6.1changedetection.io is a free open source web page change detection tool.Check if you run itEPSS 0.50%Feb 25, 2026
- Medium6.5Coturn is a free open source implementation of TURN and STUN Server.Check if you run itEPSS 0.34%Feb 25, 2026
- High7.1The SPIP interface_traduction_objets plugin versions prior to 2.2.2 contain an authenticated SQL injection vulnerability in interface_traduction_objets_pipelines.php.Check if you run itEPSS 0.43%Feb 25, 2026
- Medium5.1The SPIP jeux plugin versions prior to 4.1.1 contain a reflected cross-site scripting (XSS) vulnerability in the pre_propre pipeline.Check if you run itEPSS 0.24%Feb 25, 2026
- High8.7The SPIP interface_traduction_objets plugin versions prior to 2.2.2 contain an authenticated remote code execution vulnerability in the translation interface workflow.Check if you run itEPSS 0.87%Feb 25, 2026
- Critical9.3The SPIP tickets plugin versions prior to 4.3.3 contain an unauthenticated remote code execution vulnerability in the forum preview handling for public ticket pages.Check if you run itEPSS 1.03%Feb 25, 2026
- Critical9.3The SPIP referer_spam plugin versions prior to 1.3.0 contain an unauthenticated SQL injection vulnerability in the referer_spam_ajouter and referer_spam_supprimer action handlers.Check if you run itEPSS 0.68%Feb 25, 2026
- Critical9.8Flask-Reuploaded provides file uploads for Flask.Check if you run itEPSS 1.34%Feb 25, 2026
- High8.5tfplan2md is software for converting Terraform plan JSON files into human-readable Markdown reports.Check if you run itEPSS 0.34%Feb 25, 2026
- Critical9.8FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.76%Feb 25, 2026
- Medium6.1Karakeep is a elf-hostable bookmark-everything app.Check if you run itEPSS 0.37%Feb 25, 2026
- Critical10.0Enclave is a secure JavaScript sandbox designed for safe AI agent code execution.Check if you run itEPSS 1.01%Feb 25, 2026
- Low3.1Talishar is a fan-made Flesh and Blood project.Check if you run itEPSS 0.11%Feb 25, 2026
- High8.8InvenTree is an Open Source Inventory Management System.Check if you run itEPSS 0.29%Feb 25, 2026
- Critical9.9OliveTin gives access to predefined shell commands from a web interface.Check if you run itEPSS 0.64%Feb 25, 2026
Sort