Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMissing Authentication for Critical FunctionPatch nowKEVEPSS 10.15%Jul 2, 2025
- UnknownFortinet fortiswitchmanager Relative Path TraversalPatch nowKEVEPSS 0.93%Jun 29, 2025
- Unknownstitionai devika External Control of File Name or PathPatch nowKEVEPSS 2.07%Jun 28, 2025
- UnknownD-Link dsl-2730u_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.68%Jun 26, 2025
- UnknownWeaver e-office Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.88%Jun 26, 2025
- Unknownweiphp weiphp Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 4.20%Jun 26, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.85%Jun 26, 2025
- Critical10.0Cisco Identity Services Engine Injection VulnerabilityPatch nowKEVEPSS 97.60%Jun 25, 2025
- Unknownvendure vendure Improper Input ValidationPatch nowKEVEPSS 60.42%Jun 25, 2025
- Critical10.0Quest KACE Systems Management Appliance (SMA) Improper Authentication VulnerabilityPatch nowKEVEPSS 2.49%Jun 24, 2025
- Unknownnavidrome navidrome Improper AuthenticationPatch nowKEVEPSS 0.98%Jun 24, 2025
- Critical9.8os4ed opensis Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.95%Jun 24, 2025
- UnknownSymantec endpoint_detection_and_response Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 7.49%Jun 23, 2025
- UnknownTVT td-2108ts-cl_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 30.91%Jun 23, 2025
- Unknown5vtechnologies blue_angel_software_suite Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 11.30%Jun 23, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 52.47%Jun 20, 2025
- UnknownImproper Input ValidationPatch nowKEVEPSS 0.60%Jun 20, 2025
- Unknownaviatrix controller Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.57%Jun 20, 2025
- High8.8Sitecore experience_commerce Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 30.45%Jun 17, 2025
- High8.8Sitecore experience_commerce Relative Path TraversalPatch nowKEVEPSS 24.83%Jun 17, 2025
- Medium5.6Missing AuthorizationPatch nowKEVEPSS 0.23%Jun 10, 2025
- High7.5Apache kafka Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 68.78%Jun 10, 2025
- UnknownCisco ios_xe Use of Hard-coded CredentialsPatch nowKEVEPSS 27.49%Jun 10, 2025
- UnknownLaravel Laravel Framework Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')Patch nowKEVEPSS 44.76%Jun 8, 2025
- Unknownvercel next.js Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 59.18%Jun 8, 2025
Sort