Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1TOTOLINK a7000r_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 2.42%Jan 29, 2026
- Critical9.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityPatch nowKEVEPSS 98.64%Jan 29, 2026
- Critical9.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityPatch nowKEVEPSS 98.69%Jan 29, 2026
- Low2.1TOTOLINK a7000r_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 3.01%Jan 28, 2026
- Critical9.8SolarWinds web_help_desk Weak AuthenticationPatch nowKEVEPSS 60.64%Jan 28, 2026
- Critical9.8SolarWinds web_help_desk Deserialization of Untrusted DataPatch nowKEVEPSS 67.97%Jan 28, 2026
- Critical9.8SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 84.18%Jan 28, 2026
- Critical9.8SolarWinds Web Help Desk Security Control Bypass VulnerabilityPatch nowKEVEPSS 73.56%Jan 28, 2026
- Critical9.8Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 85.80%Jan 27, 2026
- High7.8Microsoft Office Security Feature Bypass VulnerabilityPatch nowKEVEPSS 70.80%Jan 26, 2026
- Critical9.3SmarterTools SmarterMail Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 88.18%Jan 23, 2026
- Critical9.8Langflow Langflow Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 41.22%Jan 23, 2026
- Critical9.8Langflow Langflow Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 23.09%Jan 23, 2026
- Critical9.8Langflow Inclusion of Functionality from Untrusted Control Sphere VulnerabilityPatch nowKEVEPSS 62.56%Jan 22, 2026
- Critical9.3SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 96.43%Jan 22, 2026
- Critical9.8GNU InetUtils Argument Injection VulnerabilityPatch nowKEVEPSS 98.98%Jan 21, 2026
- Critical9.8Cisco Unified Communications Products Code Injection VulnerabilityPatch nowKEVEPSS 4.54%Jan 21, 2026
- Critical10.0Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control VulnerabilityPatch nowKEVEPSS 73.19%Jan 20, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 29.20%Jan 13, 2026
- Critical9.8Fortinet Multiple Products Heap-based Buffer Overflow VulnerabilityPatch nowKEVEPSS 3.80%Jan 13, 2026
- Medium5.5Microsoft Windows Information Disclosure VulnerabilityPatch nowKEVEPSS 7.46%Jan 13, 2026
- Critical9.1mindsdb mindsdb Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 20.26%Jan 12, 2026
- High8.1Apache Struts Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 45.85%Jan 11, 2026
- High7.5comfy comfyui-manager Unprotected Alternate ChannelPatch nowKEVEPSS 1.39%Jan 5, 2026
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 20.23%Jan 5, 2026
Sort