Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user registration workflow (index.php submitting to admin/user_action.php).Check if you run itEPSS 0.22%Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in radiomobile_front.php via the stationid query parameter.Check if you run itEPSS 0.22%Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in admin/log.php via the search query parameter.Check if you run itEPSS 0.19%Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in log.php via the search query parameter.Check if you run itEPSS 0.24%Feb 20, 2026
- Critical9.1A Host Header Poisoning vulnerability exists in Monica 4.1.2 due to improper handling of the HTTP Host header in app/Providers/AppServiceProvider.php, combined with th…Check if you run itEPSS 0.44%Feb 20, 2026
- High8.8OpenSourcePOS 3.4.1 contains a Local File Inclusion (LFI) vulnerability in the Sales.php::getInvoice() function.Check if you run itEPSS 0.66%Feb 20, 2026
- High7.1An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to obtain sensitive information via the sid query parameter.Check if you run itEPSS 0.31%Feb 20, 2026
- Medium5.7The web management interface of the device renders the passwords in a plaintext input field.Check if you run itEPSS 0.34%Feb 20, 2026
- Critical9.8The web management interface of the device allows the administrator username and password to be set to blank values.Check if you run itEPSS 0.64%Feb 20, 2026
- Medium6.2HyperCloud versions 2.3.5 through 2.6.8 improperly allowed refresh tokens to be used directly for resource access and failed to invalidate previously issued access tok…Check if you run itEPSS 0.24%Feb 20, 2026
- Low2.0A weakness has been identified in detronetdip E-commerce 1.0.0.Check if you run itEPSS 0.28%Feb 20, 2026
- Critical9.8A Remote Code Execution (RCE) vulnerability was found in Smanga 3.2.7 in the /php/path/rescan.php interface.Check if you run itEPSS 1.04%Feb 20, 2026
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in whatwouldjessedo Simple Retail Menus simple-re…Check if you run itEPSS 0.41%Feb 20, 2026
- High7.5Missing Authorization vulnerability in Saiful Islam Sync Master Sheet – Product Sync with Google Sheet for WooCommerce product-sync-master-sheet allows Exploiting Inco…Check if you run itEPSS 0.30%Feb 20, 2026
- Medium6.5Authorization Bypass Through User-Controlled Key vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows Exploiting Incorrectly Configur…Check if you run itEPSS 0.40%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in Passionate Brains Advanced WC Analytics advance-wc-analytics allows Exploiting Incorrectly Configured Access Control Security Le…Check if you run itEPSS 0.29%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in Passionate Brains GA4WP: Google Analytics for WordPress ga-for-wp allows Exploiting Incorrectly Configured Access Control Securi…Check if you run itEPSS 0.29%Feb 20, 2026
- Medium4.3Missing Authorization vulnerability in Zoho Mail Zoho ZeptoMail allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.36%Feb 20, 2026
- Medium6.1A Stored Cross-Site Scripting (XSS) vulnerability in Sync-in Server before 1.9.3 allows an authenticated attacker to execute arbitrary JavaScript in a victim's browser.Check if you run itEPSS 0.32%Feb 20, 2026
- High7.6Missing Authorization vulnerability in staviravn AIO WP Builder all-in-one-wp-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issu…Check if you run itEPSS 0.24%Feb 20, 2026
- Low3.5HCL Connections is vulnerable to information disclosure.Check if you run itEPSS 0.30%Feb 20, 2026
- Medium5.3Missing Authorization vulnerability in Anssi Laitila Shared Files shared-files.This issue affects Shared Files: from n/a through <= 1.7.19.Check if you run itEPSS 0.30%Feb 20, 2026
- Critical9.5The vulnerability was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s com_ajax entry point.Check if you run itEPSS 1.75%Feb 20, 2026
- High8.4The installer for ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツール versions prior to Ver.1.3.7 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic…Check if you run itEPSS 0.18%Feb 20, 2026
- Medium5.1WordPress Plugin "Survey Maker" versions 5.1.7.7 and prior contain a cross-site scripting vulnerability.Check if you run itEPSS 0.22%Feb 20, 2026
Sort