Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMissing Authentication for Critical FunctionPatch nowKEVEPSS 44.45%Oct 15, 2025
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.53%Oct 14, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.56%Oct 14, 2025
- UnknownFour-Faith f3x36_firmware Active Debug CodePatch nowKEVEPSS 3.04%Oct 13, 2025
- Unknownrbaskets request_baskets Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 6.59%Oct 13, 2025
- UnknownApache Struts Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 70.21%Oct 13, 2025
- High7.5Oracle E-Business Suite Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 95.89%Oct 11, 2025
- UnknownD-Link dir-868l_firmware Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.82%Oct 9, 2025
- UnknownAMD Radeon Graphics Driver IOCTL Request VulnerabilityPatch nowKEVEPSS 0.44%Oct 8, 2025
- Critical9.8Fortinet FortiWeb Path Traversal VulnerabilityPatch nowKEVEPSS 91.97%Oct 6, 2025
- UnknownCisco IOS XR Heap-based Buffer OverflowPatch nowKEVEPSS 6.92%Oct 6, 2025
- Medium5.3dify dify Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.70%Sep 30, 2025
- High7.3liquidfiles liquidfiles Authentication Bypass by Primary WeaknessPatch nowKEVEPSS 0.77%Sep 30, 2025
- Unknownusememos memos Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.14%Sep 26, 2025
- Unknownusememos memos Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.05%Sep 26, 2025
- High8.6Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization VulnerabilityPatch nowKEVEPSS 87.09%Sep 25, 2025
- Critical9.9Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow VulnerabilityPatch nowKEVEPSS 71.21%Sep 25, 2025
- Unknownusememos memos Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.08%Sep 25, 2025
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.74%Sep 22, 2025
- UnknownRealtek rtl819x_jungle_software_development_kit Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.19%Sep 15, 2025
- Unknownopsview opsview Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 16.11%Sep 11, 2025
- Medium5.3chancms chancms Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.72%Sep 10, 2025
- High7.2astro \@astrojs\/cloudflare Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.87%Sep 4, 2025
- UnknownFortinet FortiWeb Improper Handling of ParametersPatch nowKEVEPSS 10.08%Sep 4, 2025
- UnknownXWiki xwiki Transmission of Private Resources into a New Sphere ('Resource Leak')Patch nowKEVEPSS 0.95%Sep 4, 2025
Sort