Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'val' parameter.Check if you run itEPSS 0.33%Feb 27, 2026
- High8.8Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'pt' parameter.Check if you run itEPSS 0.33%Feb 27, 2026
- High8.8Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the catid parameter.Check if you run itEPSS 0.33%Feb 27, 2026
- High8.8Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id' parameter.Check if you run itEPSS 0.33%Feb 27, 2026
- High8.8Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the hosting_id parameter.Check if you run itEPSS 0.41%Feb 27, 2026
- High7.1OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.23%Feb 27, 2026
- High8.7Multer is a node.js middleware for handling .Check if you run itEPSS 0.88%Feb 27, 2026
- Medium5.3The Japanized for WooCommerce plugin for WordPress is vulnerable to Improper Authentication in versions up to, and including, 2.8.4.Check if you run itEPSS 0.42%Feb 27, 2026
- High7.5An XML External Entity (XXE) vulnerability allows malicious user to perform Server-Side Request Forgery (SSRF) via crafted XML input containing malicious external enti…Check if you run itEPSS 0.28%Feb 27, 2026
- Medium6.7A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Streams.Check if you run itEPSS 0.21%Feb 27, 2026
- Low2.1A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3.Check if you run itEPSS 0.40%Feb 27, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.61%Feb 27, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.95%Feb 27, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.63%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.58%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.58%Feb 27, 2026
- Critical9.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an unauthenticated attacker to achieve remote code execution on the system…Check if you run itEPSS 2.23%Feb 27, 2026
- High7.2An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.65%Feb 27, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.51%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.55%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.55%Feb 27, 2026
- Low2.1A vulnerability has been found in psi-probe PSI Probe up to 5.3.0.Check if you run itEPSS 0.54%Feb 27, 2026
- Low2.1A flaw has been found in psi-probe PSI Probe up to 5.3.0.Check if you run itEPSS 0.76%Feb 27, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.65%Feb 27, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 1.04%Feb 27, 2026
Sort