Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownVeronaLabs wp_statistics Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.65%Aug 20, 2026
- Critical9.3Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 23.16%Aug 19, 2026
- UnknownImproper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 0.86%Aug 19, 2026
- Unknowncozmoslabs translatepress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Aug 19, 2026
- Critical9.8Gitea Code Injection VulnerabilityPatch nowKEVEPSS 23.99%Aug 19, 2026
- UnknownCritical Unauthenticated File Upload to RCE in Elementor Pro PluginPatch nowKEVEPSS 1.99%Aug 19, 2026
- Critical9.8incsub forminator Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 6.14%Aug 18, 2026
- High8.1motopress restaurant_menu Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.47%Aug 18, 2026
- Critical10.0wpcompress wp_compress Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.86%Aug 18, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Aug 18, 2026
- Critical9.3MLflow Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 10.02%Aug 17, 2026
- Critical9.1GitLab GitLab Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 60.20%Aug 17, 2026
- Unknownpodsfoundation pods Incorrect AuthorizationPatch nowKEVEPSS 3.52%Aug 15, 2026
- Unknowncozmoslabs profile_builder Incorrect Type Conversion or CastPatch nowKEVEPSS 3.90%Aug 15, 2026
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.85%Aug 14, 2026
- UnknownBoldGrid w3_total_cache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.43%Aug 14, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.45%Aug 14, 2026
- High8.9Zimbra Collaboration Suite (ZCS) OS Command Injection VulnerabilityPatch nowKEVEPSS 71.66%Aug 13, 2026
- UnknownD-Link dir-823x_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 4.90%Aug 13, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.74%Aug 13, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.74%Aug 13, 2026
- High7.5JFrog Artifactory Improper Authentication VulnerabilityPatch nowKEVEPSS 9.80%Aug 12, 2026
- Medium5.3JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory VulnerabilityPatch nowKEVEPSS 0.66%Aug 12, 2026
- High7.5Missing AuthorizationPatch nowKEVEPSS 0.41%Aug 12, 2026
- Critical9.5TrueConf Server Code Injection VulnerabilityPatch nowKEVEPSS 1.69%Aug 12, 2026
Sort