Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownonline_fire_reporting_system_project online_fire_reporting_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.78%Jun 8, 2025
- UnknownTenda g1_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.19%Jun 8, 2025
- UnknownZyxel nas326_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 89.33%Jun 7, 2025
- UnknownCisco Smart Licensing Utility Insertion of Sensitive Information into Log FilePatch nowKEVEPSS 51.90%Jun 7, 2025
- Unknownwwbn avideo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.27%Jun 7, 2025
- Unknownzoneminder zoneminder Improper AuthenticationPatch nowKEVEPSS 7.87%Jun 7, 2025
- UnknownD-Link dir-878_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.41%Jun 7, 2025
- Unknownwpdevart poll\,_survey\,_questionnaire_and_voting_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 46.00%Jun 6, 2025
- Unknownreprisesoftware reprise_license_manager Direct Request ('Forced Browsing')Patch nowKEVEPSS 9.32%Jun 5, 2025
- Unknownanji-plus report Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 51.75%May 27, 2025
- Unknownaviary_image_editor_add-on_for_gravity_forms_project aviary_image_editor_add-on_for_gravity_forms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 40.59%May 27, 2025
- UnknownCisco secure_firewall_threat_defense Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 96.59%May 22, 2025
- High8.8Linux Kernel 'sess->user' Object Use‑After‑Free VulnerabilityPatch nowKEVEPSS 0.88%May 20, 2025
- Medium6.1davidstutz bootstrap_multiselect Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.44%May 13, 2025
- High8.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityPatch nowKEVEPSS 88.00%May 13, 2025
- High7.5Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.93%May 13, 2025
- Critical9.8Fortinet Multiple Products Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 30.94%May 13, 2025
- Medium4.8smarsh telemessage Use of Hard-coded CredentialsPatch nowKEVEPSS 0.39%May 8, 2025
- Medium6.9Craft CMS External Control of Assumed-Immutable Web Parameter VulnerabilityPatch nowKEVEPSS 1.35%May 7, 2025
- UnknownZKTeco BioTime Files or Directories Accessible to External PartiesPatch nowKEVEPSS 2.66%May 2, 2025
- UnknownZKTeco BioTime Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.26%May 2, 2025
- Medium6.3TOTOLINK ca600-poe_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 0.94%May 1, 2025
- Medium6.1XWiki xwiki URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 0.58%Apr 30, 2025
- UnknownLaravel Laravel Framework Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 86.92%Apr 29, 2025
- UnknownSAP NetWeaver Deserialization of Untrusted DataPatch nowKEVEPSS 5.37%Apr 22, 2025
Sort