🛡️ CVE Intelligence Center
Common Vulnerabilities & Exposures — Security Intelligence Database
| CVE ID | Severity | CVSS | Description | Status | Published |
|---|---|---|---|---|---|
| CVE-2026-28426 | High | 8.7 |
Statmatic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.11 and 6.4.0, stored XSS …
|
✅ Patch | Feb 27, 2026 |
| CVE-2026-0980 | High | 8.3 |
A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite. An…
|
✅ Patch | Feb 27, 2026 |
| CVE-2026-2751 | High | 8.3 |
Blind SQL Injection via unsanitized array keys in Service Dependencies deletion. Vulnerability in Centreon Centreon Web …
|
✅ Patch | Feb 27, 2026 |
| CVE-2026-26862 | High | 8.3 |
CleverTap Web SDK version 1.15.2 and earlier is vulnerable to DOM-based Cross-Site Scripting (XSS) via window.postMessag…
|
✅ Patch | Feb 27, 2026 |
| CVE-2026-26861 | High | 8.3 |
CleverTap Web SDK version 1.15.2 and earlier is vulnerable to Cross-Site Scripting (XSS) via window.postMessage. The han…
|
✅ Patch | Feb 27, 2026 |
| CVE-2019-25489 | High | 8.2 |
Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries…
|
✅ Patch | Feb 27, 2026 |
| CVE-2019-25490 | High | 8.2 |
Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries…
|
✅ Patch | Feb 27, 2026 |
| CVE-2019-25491 | High | 8.2 |
Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database querie…
|
✅ Patch | Feb 27, 2026 |
| CVE-2019-25492 | High | 8.2 |
Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database querie…
|
✅ Patch | Feb 27, 2026 |
| CVE-2019-25493 | High | 8.2 |
Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database querie…
|
✅ Patch | Feb 27, 2026 |
| CVE-2019-25494 | High | 8.2 |
Homey BNB V4 contains an SQL injection vulnerability in the administration panel login that allows unauthenticated attac…
|
✅ Patch | Feb 27, 2026 |
| CVE-2019-25495 | High | 8.2 |
osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database q…
|
✅ Patch | Feb 27, 2026 |
| CVE-2019-25496 | High | 8.2 |
osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database q…
|
✅ Patch | Feb 27, 2026 |
| CVE-2019-25497 | High | 8.2 |
osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database q…
|
✅ Patch | Feb 27, 2026 |
| CVE-2026-28272 | High | 8.1 |
Kiteworks is a private data network (PDN). Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway…
|
✅ Patch | Feb 27, 2026 |
| CVE-2026-24452 | High | 8.0 |
An OS command injection
vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an
authenticated attacker…
|
✅ Patch | Feb 27, 2026 |
| CVE-2026-20764 | High | 8.0 |
An OS command injection
vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an
authenticated attacker …
|
✅ Patch | Feb 27, 2026 |
| CVE-2026-3037 | High | 8.0 |
An OS command injection vulnerability exists in XWEB Pro version 1.12.1
and prior, enabling an authenticated attacker t…
|
✅ Patch | Feb 27, 2026 |
| CVE-2026-23702 | High | 8.0 |
An OS command injection
vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an
authenticated attacker …
|
✅ Patch | Feb 27, 2026 |
| CVE-2026-25105 | High | 8.0 |
An OS command injection
vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an
authenticated atta…
|
✅ Patch | Feb 27, 2026 |