Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Unknowntheme-fusion avada_builder Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVJun 18, 2026
- Critical9.3PTC Windchill and FlexPLM Improper Input Validation VulnerabilityKEVEPSS 46.0%Jun 17, 2026
- UnknownQNAP malware_remover Improper Control of Generation of Code ('Code Injection')KEVJun 17, 2026
- High7.8Linux Kernel Integer Overflow or WraparoundKEVEPSS 0.6%Jun 16, 2026
- UnknownShapedPlugin Pro Backdoor CompromiseKEVJun 16, 2026
- UnknownMissing AuthorizationKEVJun 16, 2026
- UnknownTopaz Antifraud wsftprm.sys Kernel Driver Process TerminationKEVJun 16, 2026
- High8.8Zyxel GS1900 Series Switches Stack-Based Buffer Overflow VulnerabilityKEVEPSS 2.5%Jun 15, 2026
- UnknownJenkins Jenkins Deserialization of Untrusted DataKEVJun 15, 2026
- UnknownMissing AuthorizationKEVJun 15, 2026
- Critical10.0JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type VulnerabilityKEVEPSS 88.5%Jun 15, 2026
- Medium6.5Cisco Catalyst SD-WAN Manager Directory or Path Traversal VulnerabilityKEVEPSS 28.2%Jun 15, 2026
- Critical9.5SimpleHelp Authentication Bypass VulnerabilityKEVEPSS 5.7%Jun 12, 2026
- Unknownfrangoteam fuxa Missing AuthorizationKEVJun 12, 2026
- Unknownslicewp affiliate_program_suite Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVJun 11, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVJun 11, 2026
- Critical9.8Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function VulnerabilityKEVEPSS 96.7%Jun 10, 2026
- Critical9.8Splunk Enterprise Missing Authentication for Critical Function VulnerabilityKEVEPSS 96.9%Jun 10, 2026
- Unknowntribulant newsletters Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVJun 10, 2026
- Unknownupdraftplus updraftplus Improper Verification of Cryptographic SignatureKEVJun 10, 2026
- Critical9.8Fortinet FortiSandbox OS Command Injection VulnerabilityKEVEPSS 76.1%Jun 9, 2026
- Critical10.0Ivanti Sentry OS Command Injection VulnerabilityKEVEPSS 99.9%Jun 9, 2026
- Critical9.3Check Point Security Gateway Improper Authentication VulnerabilityKEVEPSS 85.3%Jun 8, 2026
- UnknownCrocoblock jetengine Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVJun 8, 2026
- UnknownWordPress Hippoo Mobile App for WooCommerce Privilege EscalationKEVJun 8, 2026