Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownSonicWall SonicOS Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)Patch nowKEVEPSS 1.03%Feb 5, 2026
- UnknownSonicWall SonicOS Stack-based Buffer OverflowPatch nowKEVEPSS 0.97%Feb 5, 2026
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.34%Feb 4, 2026
- UnknownCisco finesse Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 22.64%Feb 4, 2026
- Unknowncozmoslabs profile_builder Improper Privilege ManagementPatch nowKEVEPSS 0.54%Feb 3, 2026
- Unknowngivewp givewp Deserialization of Untrusted DataPatch nowKEVEPSS 1.25%Feb 3, 2026
- High7.7Notepad++ Download of Code Without Integrity Check VulnerabilityPatch nowKEVEPSS 1.77%Feb 2, 2026
- Low2.1TOTOLINK a7000r_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 2.42%Jan 29, 2026
- Critical9.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityPatch nowKEVEPSS 98.64%Jan 29, 2026
- Critical9.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityPatch nowKEVEPSS 98.69%Jan 29, 2026
- UnknownUncontrolled Resource ConsumptionPatch nowKEVEPSS 0.28%Jan 29, 2026
- Critical9.8SolarWinds Web Help Desk Security Control Bypass VulnerabilityPatch nowKEVEPSS 73.56%Jan 28, 2026
- High7.8Microsoft Office Security Feature Bypass VulnerabilityPatch nowKEVEPSS 70.80%Jan 26, 2026
- UnknownApache continuum Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 3.89%Jan 26, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.82%Jan 25, 2026
- Critical9.3SmarterTools SmarterMail Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 88.18%Jan 23, 2026
- Unknownevenroute iqrouter_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.23%Jan 23, 2026
- Critical9.3SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 96.43%Jan 22, 2026
- UnknownNETGEAR d6400_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 12.13%Jan 22, 2026
- Unknownapusthemes superio Incorrect Privilege AssignmentPatch nowKEVEPSS 0.66%Jan 22, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.76%Jan 22, 2026
- UnknownInfiray cmd_string URL Parameter Arbitraty Command ExecutionPatch nowKEVEPSS 1.55%Jan 22, 2026
- Critical9.8GNU InetUtils Argument Injection VulnerabilityPatch nowKEVEPSS 98.98%Jan 21, 2026
- Critical9.8Cisco Unified Communications Products Code Injection VulnerabilityPatch nowKEVEPSS 4.54%Jan 21, 2026
- Unknownla-studioweb element_kit_for_elementor Improper Privilege ManagementPatch nowKEVEPSS 1.11%Jan 21, 2026
Sort