Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8WordPress Core Interpretation Conflict VulnerabilityPatch nowKEVEPSS 10.65%Jul 17, 2026
- Medium5.9WordPress Core SQL Injection VulnerabilityPatch nowKEVEPSS 5.32%Jul 17, 2026
- Critical9.1Microsoft SharePoint Weak Authentication VulnerabilityPatch nowKEVEPSS 69.54%Jul 14, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 3.04%Jul 14, 2026
- UnknownBoldGrid w3_total_cache Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.86%Jul 14, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 15.87%Jul 14, 2026
- Critical9.8Microsoft SharePoint Server Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 1.01%Jul 14, 2026
- High7.8Microsoft Active Directory Federation Services Insufficient Granularity of Access Control VulnerabilityPatch nowKEVEPSS 0.35%Jul 14, 2026
- High7.2SonicWall SMA1000 Appliances Code Injection VulnerabilityPatch nowKEVEPSS 11.79%Jul 14, 2026
- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 6.79%Jul 14, 2026
- High8.8Improper Privilege ManagementPatch nowKEVEPSS 0.44%Jul 11, 2026
- UnknownVeeam veeam_backup_\&_replication Deserialization of Untrusted DataPatch nowKEVEPSS 0.61%Jul 10, 2026
- Unknownmailoptin mailoptin Incorrect Privilege AssignmentPatch nowKEVEPSS 0.48%Jul 9, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 5.09%Jul 9, 2026
- Low2.1LiteLLM LiteLLM Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.90%Jul 8, 2026
- High8.8BerriAI LiteLLM Improper Authentication VulnerabilityPatch nowKEVEPSS 0.84%Jul 8, 2026
- Critical10.0Balbooa Forms Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 14.85%Jul 8, 2026
- UnknownFlowiseAI Flowise Missing Authentication for Critical FunctionPatch nowKEVEPSS 2.05%Jul 8, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.04%Jul 7, 2026
- High8.4Flyto2 Core is an execution kernel for automation and AI-agent workflows.Patch nowKEVEPSS 0.26%Jul 6, 2026
- UnknownGitea Gitea Improper Access ControlPatch nowKEVEPSS 2.76%Jul 6, 2026
- High7.8Linux Kernel Unspecified VulnerabilityPatch nowKEVEPSS 0.71%Jul 4, 2026
- UnknownFlowiseAI Flowise External Control of File Name or PathPatch nowKEVEPSS 4.36%Jul 3, 2026
- Unknowncreativethemes blocksy_companion Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.57%Jul 2, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.48%Jul 2, 2026
Sort