Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.27%Apr 9, 2026
- Critical9.3Marimo Remote Code Execution VulnerabilityPatch nowKEVEPSS 37.87%Apr 9, 2026
- Medium4.7Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.39%Apr 8, 2026
- Critical9.3nextendweb smart_slider_3 Embedded Malicious CodePatch nowKEVEPSS 0.97%Apr 7, 2026
- Critical9.3Weaver e-cology Missing Authentication for Critical FunctionPatch nowKEVEPSS 20.36%Apr 7, 2026
- High8.7LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.Patch nowKEVEPSS 3.98%Apr 6, 2026
- Unknownfit2cloud 1panel Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.97%Apr 6, 2026
- Critical9.3topsecgroup tianxin_internet_behavior_management_system Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.17%Apr 6, 2026
- UnknownStrapi Strapi Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 70.60%Apr 4, 2026
- Critical9.8Fortinet FortiClient EMS Improper Access Control VulnerabilityPatch nowKEVEPSS 93.98%Apr 3, 2026
- Unknownkaizencoders url_shortify URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 0.66%Apr 2, 2026
- Unknownwpdirectorykit wp_directory_kit Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.71%Apr 2, 2026
- Critical9.3metinfo metinfo Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 4.50%Apr 1, 2026
- Unknownmintplexlabs anythingllm Insertion of Sensitive Information Into Sent DataPatch nowKEVEPSS 1.69%Apr 1, 2026
- UnknownownCloud guests Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.95%Apr 1, 2026
- Unknownstrategy11 awp_classifieds Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.52%Apr 1, 2026
- Critical9.8The Everest Forms Pro plugin for WordPress is vulnerable to Remote Code Execution via PHP Code Injection in all versions up to, and including, 1.9.12.Patch nowKEVEPSS 4.43%Mar 31, 2026
- High8.8Google Dawn Use-After-Free VulnerabilityPatch nowKEVEPSS 0.70%Mar 31, 2026
- High7.5The Gravity SMTP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4.Patch nowKEVEPSS 2.24%Mar 31, 2026
- Unknownthimpress learnpress Improper Access ControlPatch nowKEVEPSS 1.16%Mar 31, 2026
- Critical9.8Nginx UI is a web user interface for the Nginx web server.Patch nowKEVEPSS 2.52%Mar 30, 2026
- High8.7Langflow is a tool for building and deploying AI-powered agents and workflows.Patch nowKEVEPSS 2.03%Mar 24, 2026
- Critical9.9Langflow is a tool for building and deploying AI-powered agents and workflows.Patch nowKEVEPSS 1.09%Mar 24, 2026
- Critical10.0WWBN AVideo is an open source video platform.Patch nowKEVEPSS 11.24%Mar 23, 2026
- Critical9.3Citrix NetScaler Out-of-Bounds Read VulnerabilityPatch nowKEVEPSS 4.04%Mar 23, 2026
Sort