CVEs published February 1, 2026
34 CVEs were published on February 1, 2026: 0 critical, 15 high.
- Published
- 34
- Critical
- 0
- High
- 15
- Medium
- 19
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- PHPSUGAR PHP Melody
- 4
- Simplephpscripts Simple CMS
- 3
- Zhong Bang CRMEB
- 2
- ajay138 Knap Advanced PHP Login
- 1
- Author: Scott Ferreira Free Photo & Video Vault - WiFi Tran…
- 1
- AVAST SecureLine
- 1
- Banco de Guayaquil Banco Guayaquil
- 1
- CriticalGears PayPal PRO Payment Terminal · CriticalGear… +1
- 1
- Deepinstinct Deep Instinct Windows Agent
- 1
- Enigmasoftware SpyHunter
- 1
High 15
- CVE-2026-25253OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket conneOpenClaw · clawdbot
- CVE-2020-37064EPSON EasyMP Network Projection 2.81 - 'EMP_NSWLSV' Unquoted Service PathEPSON EasyMP Network Projection
- CVE-2020-37063TFTP Turbo 4.6.1273 - 'TFTP Turbo 4' Unquoted Service PathWeird-Solutions TFTP Turbo
- CVE-2020-37062DHCP Turbo 4.6.1298- 'DHCP Turbo 4' Unquoted Service PathWeird Solutions DHCP Turbo
- CVE-2020-37061BOOTP Turbo 2.0.1214 - 'BOOTP Turbo' Unquoted Service PathWeird-Solutions BOOTP Turbo
- CVE-2020-37055SpyHunter 4 - 'SpyHunter 4 Service' Unquoted Service PathEnigmasoftware SpyHunter
- CVE-2020-37048Iskysoft Application Framework Service 2.4.3.241 - 'IsAppService' Unquoted Service PathIskysoft Application Framework Service
- CVE-2020-37047Deep Instinct Windows Agent 1.2.29.0 - 'DeepMgmtService' Unquoted Service PathDeepinstinct Deep Instinct Windows Agent
- CVE-2020-37045NetBackup 7.0 - 'NetBackup INET Daemon' Unquoted Service PathVeritas NetBackup
- CVE-2020-37037AVAST SecureLine 5.5.522.0 - 'SecureLine' Unquoted Service PathAVAST SecureLine
- CVE-2022-50950Webile 1.0.1 Directory Traversal Vulnerability via Web ApplicationProduct Owner: Webile Webile
- CVE-2021-47921Free Photo & Video Vault 0.0.2 Directory Traversal Vulnerability via Web RequestAuthor: Scott Ferreira Free Photo & Video Vault - WiFi Tran…
- CVE-2021-47918Simple CMS 2.1 SQL Injection Vulnerability via Users ModuleSimplephpscripts Simple CMS
- CVE-2021-47915PHP Melody 3.0 SQL Injection Vulnerability via Edit Video ParameterPHPSUGAR PHP Melody
- CVE-2021-47909Mult-E-Cart Ultimate 2.4 SQL Injection via Vulnerable ID ParametersTechraft Digital Multivendor Marketplace Online Store
Medium, low and unrated 19
- CVE-2026-1734Zhong Bang CRMEB crontab Endpoint CrontabController.php authorizationZhong Bang CRMEB
- CVE-2026-1733Zhong Bang CRMEB :uni tidyOrder improper authorizationZhong Bang CRMEB
- CVE-2023-54343QWE DL 2.0.1 Persistent XSS Vulnerability via Path ParameterQWE Labs QWE DL
- CVE-2022-50952Banco Guayaquil 8.0.0 Mobile iOS Cross-Site Scripting via Profile Name InputBanco de Guayaquil Banco Guayaquil
- CVE-2022-50951WiFi File Transfer 1.0.8 Persistent XSS via Web Server Input ValidationsmarterDroid WiFi File Transfer
- CVE-2022-50942Incinga Web 2.8.2 Client-Side Cross-Site Scripting via EventListenerIncinga Web
- CVE-2022-50941BootCommerce 3.2.1 Persistent Cross-Site Scripting via Order CheckoutMrPlugins BootCommerce
- CVE-2022-50940Knap Advanced PHP Login 3.1.3 Persistent Cross-Site Scripting via Name Parameterajay138 Knap Advanced PHP Login
- CVE-2022-50797Stripe Green Downloads Wordpress Plugin 2.03 Persistent XSS via Settingshalfdata Stripe Green Downloads
- CVE-2021-47920WebMO Job Manager 20.0 Cross-Site Scripting via Search ParametersWebMO Job Manager
- CVE-2021-47919Simple CMS 2.1 Non-Persistent Cross-Site Scripting via Preview ParameterSimplephpscripts Simple CMS
- CVE-2021-47917Simple CMS 2.1 Persistent Cross-Site Scripting via User Input ParametersSimplephpscripts Simple CMS
- CVE-2021-47914PHP Melody 3.0 Persistent XSS Vulnerability via Edit Video ParameterPHPSUGAR PHP Melody
- CVE-2021-47913PHP Melody 3.0 Persistent Cross-Site Scripting via Video EditorPHPSUGAR PHP Melody
- CVE-2021-47912PHP Melody 3.0 Non-Persistent Cross-Site Scripting via Multiple ParametersPHPSUGAR PHP Melody
- CVE-2021-47911Affiliate Pro 1.7 Reflected Cross-Site Scripting via Index Modulejdwebdesigner Affiliate Pro
- CVE-2021-47908Ultimate POS 4.4 Persistent Cross-Site Scripting via Product Name
- CVE-2021-47885Payment Terminal Multiple Versions Non-Persistent Cross-Site ScriptingCriticalGears PayPal PRO Payment Terminal · CriticalGear… +1
- CVE-2021-47856Easy Cart Shopping Cart 2021 Cross-Site Scripting via Search ParameterNetArt Media Easy Cart Shopping Cart