Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8The Tutor LMS Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 3.9.5 via the Social Login addon.Patch nowKEVEPSS 0.67%Mar 9, 2026
- Medium6.9Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs.Patch nowKEVEPSS 2.17%Mar 6, 2026
- Critical9.8AVideo is a video-sharing Platform software.Patch nowKEVEPSS 6.92%Mar 6, 2026
- Critical9.8Nginx UI is a web user interface for the Nginx web server.Patch nowKEVEPSS 1.01%Mar 5, 2026
- Critical10.0Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 43.17%Mar 4, 2026
- Critical10.0Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 88.47%Mar 4, 2026
- High7.5Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.57%Mar 4, 2026
- Critical9.2Qwik is a performance focused javascript framework.Patch nowKEVEPSS 2.95%Mar 3, 2026
- High7.8Qualcomm Multiple Chipsets Memory Corruption VulnerabilityPatch nowKEVEPSS 1.29%Mar 2, 2026
- Critical9.8WPEverest user_registration_\&_membership Improper Privilege ManagementPatch nowKEVEPSS 28.54%Mar 2, 2026
- Medium5.5A flaw has been found in MaxSite CMS up to 109.1.Patch nowKEVEPSS 2.53%Mar 1, 2026
- High7.5Themeum tutor_lms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.50%Feb 28, 2026
- Critical9.3openDCIM version 23.04, through commit 4467e9c4, contains an OS command injection vulnerability in report_network_map.php.Patch nowKEVEPSS 9.40%Feb 27, 2026
- Critical9.3openDCIM version 23.04, through commit 4467e9c4, contains a missing authorization vulnerability in install.php and container-install.php.Patch nowKEVEPSS 2.12%Feb 27, 2026
- High7.5Gradio is an open-source Python package designed for quick prototyping.Patch nowKEVEPSS 2.54%Feb 27, 2026
- High7.2WeGIA is a web manager for charitable institutions.Patch nowKEVEPSS 3.93%Feb 27, 2026
- High7.5The WP Responsive Images plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0 via the 'src' parameter.Patch nowKEVEPSS 1.87%Feb 26, 2026
- Critical9.3Juniper junos_os_evolved Incorrect Permission Assignment for Critical ResourcePatch nowKEVEPSS 18.48%Feb 25, 2026
- High8.1Broadcom VMware Aria Operations Command Injection VulnerabilityPatch nowKEVEPSS 18.32%Feb 25, 2026
- High7.5Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityPatch nowKEVEPSS 31.48%Feb 25, 2026
- High7.5Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format VulnerabilityPatch nowKEVEPSS 7.32%Feb 25, 2026
- Medium5.4Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs VulnerabilityPatch nowKEVEPSS 25.80%Feb 25, 2026
- Critical10.0Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass VulnerabilityPatch nowKEVEPSS 89.29%Feb 25, 2026
- Critical9.8FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE).Patch nowKEVEPSS 5.49%Feb 24, 2026
- High7.3Missing AuthorizationPatch nowKEVEPSS 0.64%Feb 20, 2026
Sort