Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.2ASUS asus_firmware Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 1.13%Apr 18, 2025
- Critical9.8Qualitia Active! Mail Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 3.36%Apr 17, 2025
- Critical9.3st._joe_erp_system_project st._joe_erp_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.11%Apr 14, 2025
- Critical9.8Langflow Missing Authentication VulnerabilityPatch nowKEVEPSS 99.99%Apr 7, 2025
- UnknownCisco meraki_mx64_firmware Failure to Handle Missing ParameterPatch nowKEVEPSS 1.14%Mar 31, 2025
- Unknownvercel next.js Improper AuthorizationPatch nowKEVEPSS 99.22%Mar 28, 2025
- High7.2D-Link DIR-823X Command Injection VulnerabilityPatch nowKEVEPSS 87.94%Mar 25, 2025
- Unknownperfsonar perfsonar Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 4.45%Mar 17, 2025
- Critical9.3Edimax IC-7100 IP Camera OS Command Injection VulnerabilityPatch nowKEVEPSS 74.48%Mar 4, 2025
- Critical9.8usememos memos Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 2.93%Feb 27, 2025
- Unknowndahuasecurity dvr Improper AuthenticationPatch nowKEVEPSS 69.68%Feb 27, 2025
- UnknownNextChat NextChat Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 2.17%Feb 25, 2025
- UnknownFortinet FortiSIEM Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.29%Feb 25, 2025
- UnknownFortinet FortiSIEM Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 80.30%Feb 25, 2025
- UnknownVMware Spring Framework Unintended Proxy or Intermediary ('Confused Deputy')Patch nowKEVEPSS 10.21%Feb 25, 2025
- Critical9.8XWiki Platform Eval Injection VulnerabilityPatch nowKEVEPSS 99.86%Feb 20, 2025
- High8.1Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityPatch nowKEVEPSS 7.23%Feb 11, 2025
- Critical9.9Wazuh Server Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 93.84%Feb 10, 2025
- High7.5vitest.dev vitest Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.40%Feb 4, 2025
- High8.8Zyxel DSL CPE OS Command Injection VulnerabilityPatch nowKEVEPSS 20.70%Jan 28, 2025
- UnknownSolarWinds dameware_mini_remote_control Origin Validation ErrorPatch nowKEVEPSS 5.18%Jan 28, 2025
- UnknownWordPress Oshine Modules Plugin Server Side Request Forgery (SSRF)Patch nowKEVEPSS 0.26%Jan 27, 2025
- High7.5SimpleHelp Path Traversal VulnerabilityPatch nowKEVEPSS 96.83%Jan 15, 2025
- Critical9.8Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityPatch nowKEVEPSS 94.35%Jan 14, 2025
- Unknownmimosa b5_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 5.31%Dec 16, 2024
Sort