Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownrevive-sas revive_adserver Deserialization of Untrusted DataPatch nowKEVEPSS 57.02%Mar 9, 2026
- Unknownzimaspace zimaos Improper AuthenticationPatch nowKEVEPSS 2.32%Mar 7, 2026
- Unknowncuppacms cuppacms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 4.66%Mar 7, 2026
- Critical9.8Nginx UI is a web user interface for the Nginx web server.Patch nowKEVEPSS 1.01%Mar 5, 2026
- UnknownSchneider Electric u.motion_builder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.47%Mar 5, 2026
- Critical10.0Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 88.47%Mar 4, 2026
- High7.5Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.57%Mar 4, 2026
- Critical9.2Qwik is a performance focused javascript framework.Patch nowKEVEPSS 2.95%Mar 3, 2026
- High7.8Qualcomm Multiple Chipsets Memory Corruption VulnerabilityPatch nowKEVEPSS 1.29%Mar 2, 2026
- Medium5.5A flaw has been found in MaxSite CMS up to 109.1.Patch nowKEVEPSS 2.53%Mar 1, 2026
- Critical9.3openDCIM version 23.04, through commit 4467e9c4, contains an OS command injection vulnerability in report_network_map.php.Patch nowKEVEPSS 9.40%Feb 27, 2026
- Critical9.3openDCIM version 23.04, through commit 4467e9c4, contains a missing authorization vulnerability in install.php and container-install.php.Patch nowKEVEPSS 2.12%Feb 27, 2026
- High7.2WeGIA is a web manager for charitable institutions.Patch nowKEVEPSS 3.93%Feb 27, 2026
- High7.5The WP Responsive Images plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0 via the 'src' parameter.Patch nowKEVEPSS 1.87%Feb 26, 2026
- High8.1Broadcom VMware Aria Operations Command Injection VulnerabilityPatch nowKEVEPSS 18.32%Feb 25, 2026
- High7.5Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format VulnerabilityPatch nowKEVEPSS 7.32%Feb 25, 2026
- Medium5.4Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs VulnerabilityPatch nowKEVEPSS 25.80%Feb 25, 2026
- Critical10.0Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass VulnerabilityPatch nowKEVEPSS 89.29%Feb 25, 2026
- Critical9.8FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE).Patch nowKEVEPSS 5.49%Feb 24, 2026
- UnknownCisco Identity Services Engine Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 6.21%Feb 24, 2026
- UnknownD-Link dir-803_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 3.99%Feb 20, 2026
- Critical9.3SPIP saisies Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 5.59%Feb 19, 2026
- Unknownopenclaw openclaw Incorrect Resource Transfer Between SpheresPatch nowKEVEPSS 24.43%Feb 19, 2026
- Unknownclavaque s2member Improper Privilege ManagementPatch nowKEVEPSS 0.43%Feb 19, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.40%Feb 19, 2026
Sort