CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 02/11/2026 |
| CVE-2026-118871 | 보통6.5 | SQL injection vulnerability classified as an internal threat level.Attackers can steal database information via SQL injection while logged in. | 02/11/2026 |
| CVE-2025-13647 | 보통5.8 | The affected component fails to enforce expected validation constraints on the `content-type` header when processing certain requests. This allows an attacker to submit a crafted request with a manipulated `content-type` header.
Successful exploitation can lead to the unintended exposure of the file paths for certific | 02/11/2026 |
| CVE-2024-7075 | 보통4.6 | The user search function within the management console fails to properly encode user-supplied input before rendering it in the browser. This allows an attacker to inject malicious scripts that are then executed by the user's browser in the context of the management console.
Successful exploitation enables an attacker | 02/11/2026 |
| CVE-2026-107457 | 낮음2.3 | A memory corruption vulnerability in the QMqttClient class of the Qt MQTT module. Under certain MQTT 5 connection settings between client and server, QMqttClient may corrupt memory, which can cause the application to crash. | 02/11/2026 |
| CVE-2026-18199 | 높음8.8 | Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601 are vulnerable to an authenticated Remote Code Execution vulnerability. | 02/11/2026 |
| CVE-2026-103310 | 보통5.3 | The PayHere Payment Gateway WordPress plugin from 2.4.0 through 2.4.5 does not verify the authenticity of payment notifications when the merchant secret is unset, which is the default state, allowing unauthenticated attackers to forge a payment confirmation and mark any order as paid without payment. | 02/11/2026 |
| CVE-2026-101184 | 보통5.5 | Permission control vulnerability in the Bluetooth module.
Impact: Successful exploitation of this vulnerability may affect availability. | 02/11/2026 |
| CVE-2026-101178 | 보통6.6 | Permission control vulnerability in the autofill service module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality. | 02/11/2026 |
| CVE-2026-120349 | 높음7.3 | A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.4. Affected by this issue is the function str_replace of the file /var/www/html/zzmob/index.php of the component Mobile Site Directory. The manipulation of the argument dirname results in code injection. The attack can be launched remotely. The exploit h | 02/11/2026 |
| CVE-2026-101186 | 높음7.5 | DoS vulnerability in the window module.
Impact: Successful exploitation of this vulnerability may affect availability. | 02/11/2026 |
| CVE-2026-101185 | 보통5.9 | OOB read vulnerability in the peripheral module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality. | 02/11/2026 |
| CVE-2026-101183 | 보통5.9 | UAF vulnerability in the location service module.
Impact: Successful exploitation of this vulnerability may affect availability. | 02/11/2026 |
| CVE-2026-101182 | 보통5.9 | Race condition vulnerability in the location service module.
Impact: Successful exploitation of this vulnerability may affect availability. | 02/11/2026 |
| CVE-2026-101181 | 보통5.5 | Permission control vulnerability in the WLAN module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality. | 02/11/2026 |
| CVE-2026-101180 | 보통4.3 | DoS vulnerability in the file parsing module.
Impact: Successful exploitation of this vulnerability may affect availability. | 02/11/2026 |
| CVE-2026-101179 | 보통4.7 | Buffer overflow vulnerability in the file preview module.
Impact: Successful exploitation of this vulnerability may affect availability. | 02/11/2026 |
| CVE-2026-101177 | 낮음3.7 | Permission control vulnerability in the Optimizer module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality. | 02/11/2026 |