Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownkodezen academy_lms Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 0.41%Jan 21, 2026
- UnknownZyxel vmg4325-b10a_firmware Improper AuthenticationPatch nowKEVEPSS 13.65%Jan 20, 2026
- UnknownExposure of Private Personal Information to an Unauthorized ActorPatch nowKEVEPSS 0.79%Jan 20, 2026
- UnknownTP-Link tl-wr845n_firmware Use of Hard-coded CredentialsPatch nowKEVEPSS 1.15%Jan 20, 2026
- Unknownphpmyfaq phpmyfaq Exposure of Sensitive Information Through Data QueriesPatch nowKEVEPSS 2.14%Jan 18, 2026
- Unknownchanjetvip t\+ Deserialization of Untrusted DataPatch nowKEVEPSS 1.10%Jan 15, 2026
- Unknownlanggenius dify Improper Access ControlPatch nowKEVEPSS 29.93%Jan 14, 2026
- UnknownXWiki xwiki Improper Access ControlPatch nowKEVEPSS 1.47%Jan 14, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 29.20%Jan 13, 2026
- Medium5.5Microsoft Windows Information Disclosure VulnerabilityPatch nowKEVEPSS 7.46%Jan 13, 2026
- Unknownn8n n8n Improper Input ValidationPatch nowKEVEPSS 78.19%Jan 9, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 12.05%Jan 7, 2026
- Unknownw3eden download_manager Missing Support for Integrity CheckPatch nowKEVEPSS 0.20%Jan 6, 2026
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 20.23%Jan 5, 2026
- UnknownD-Link dir-600 Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.97%Jan 5, 2026
- High8.8Langflow Langflow Missing Authentication for Critical FunctionPatch nowKEVEPSS 33.29%Jan 2, 2026
- Unknownwpmudev branda Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 1.87%Jan 2, 2026
- UnknownGargoyle Authenticated 'run_commands.sh' OS Command ExecutionPatch nowKEVEPSS 0.73%Dec 31, 2025
- Critical10.0SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 85.66%Dec 28, 2025
- High8.8Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion VulnerabilityPatch nowKEVEPSS 48.87%Dec 22, 2025
- High8.8n8n Improper Control of Dynamically-Managed Code Resources VulnerabilityPatch nowKEVEPSS 98.99%Dec 19, 2025
- UnknownCowrie Unrestricted wget/curl Emulation SSRF-Based DDoS AmplificationPatch nowKEVEPSS 0.68%Dec 19, 2025
- Unknownman d-tale Use of Hard-coded CredentialsPatch nowKEVEPSS 77.97%Dec 19, 2025
- Medium6.1RoundCube Webmail Cross-site Scripting VulnerabilityPatch nowKEVEPSS 26.84%Dec 17, 2025
- Medium6.6SonicWall SMA1000 Missing Authorization VulnerabilityPatch nowKEVEPSS 2.76%Dec 17, 2025
Sort