Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3TrueConf Server Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 1.46%Aug 12, 2026
- High8.1Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)Patch nowKEVEPSS 0.96%Aug 11, 2026
- Critical9.1Adobe Commerce and Magento Incorrect Authorization VulnerabilityPatch nowKEVEPSS 87.51%Aug 11, 2026
- High8.8Microsoft SharePoint Code Injection VulnerabilityPatch nowKEVEPSS 2.10%Aug 11, 2026
- High7.0Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityPatch nowKEVEPSS 0.33%Aug 11, 2026
- High8.6Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection VulnerabilityPatch nowKEVEPSS 1.01%Aug 11, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.38%Aug 11, 2026
- UnknownWeaver e-cology Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.62%Aug 11, 2026
- UnknownWeaver E-cology 8.0 SQL Injection File Read via SignatureDownLoadPatch nowKEVEPSS 0.63%Aug 11, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.27%Aug 10, 2026
- UnknownWordPress REST API Log Plugin Sensitive Data ExposurePatch nowKEVEPSS 0.42%Aug 10, 2026
- UnknownWordPress MultiVendorX Plugin Broken Access ControlPatch nowKEVEPSS 0.39%Aug 10, 2026
- UnknownAdobe Acrobat and Reader Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.21%Aug 10, 2026
- Critical9.8Apple macOS Improper Authentication VulnerabilityPatch nowKEVEPSS 1.72%Aug 6, 2026
- Critical10.0WSO2 Multiple Products Path Traversal VulnerabilityPatch nowKEVEPSS 0.59%Aug 6, 2026
- Critical10.0Metabase SQL Injection VulnerabilityPatch nowKEVEPSS 97.44%Aug 6, 2026
- UnknownImproper AuthenticationPatch nowKEVEPSS 0.87%Aug 6, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.52%Aug 5, 2026
- Unknownkaliforms contact_form_builder Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.19%Aug 5, 2026
- Critical9.2FlowiseAI Flowise Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.60%Aug 4, 2026
- UnknownDeserialization of Untrusted DataPatch nowKEVEPSS 0.56%Aug 4, 2026
- UnknownRapid7 Analysis: KindaRails2Shell (CVE-2026-66066)Patch nowKEVEPSS 27.86%Aug 3, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.58%Aug 3, 2026
- Unknownb3log siyuan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.39%Aug 3, 2026
- High8.2N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 14.62%Aug 2, 2026
Sort