S
Vendor security profile
st
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs2
Critical1
CISA KEV0
Public exploit0
Patch rate%50
Avg. CVSS7.9
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
0
CVE KEV
CVE severity distribution
2toplam CVE
Critical1 (50%)
Medium1 (50%)
Patch and exploitation view
%50
Verified patch
%0
CISA KEV
%0
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
1Unknown
Latest vulnerabilities
9.2
CVE-2026-109573
phpMyFAQ before 4.1.9 SQL Injection via api/autocomplete Search Endpoint
T
Patch status unknown
6.5
CVE-2026-41210
Moonlight Qt: Remote heap buffer overflow in Moonlight Qt H.264 SPS fixup path via crafted seq_parameter_set_id
M
Patch status unknown
4.3
CVE-2026-106495
Backstage: Improper access control in backend action invocation
B
Patch status unknown
8.6
CVE-2026-65954
PHPCSUtils: Remote code execution via eval() in AbstractArrayDeclarationSniff::getActualArrayKey()
P
Patch status unknown
4.3
CVE-2026-102663
OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search
O
Patch status unknown
5.3
CVE-2026-108920
SourceCodester Drug Recommendation System Admin Record Tables user_record.php cross site scripting
S
Patch status unknown
5.3
CVE-2026-108919
SourceCodester Drug Recommendation System Student Registration add_student.php cross site scripting
S
Patch status unknown
5.9
CVE-2026-109448
psqlODBC SQLBindParameter heap memory corruption when binding more than 32767 parameters
P
Patch status unknown
6.5
CVE-2026-107862
WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability
E
Patch status unknown
8.8
CVE-2026-12613
Insecure Deserialization Leading to Remote Code Execution in Ministry of Justice's UYAP Document Editor
MO
Patch status unknown