Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Langflow Langflow Missing Authentication for Critical FunctionPatch nowKEVEPSS 33.29%Jan 2, 2026
- High8.1QNAP malware_remover Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.52%Jan 2, 2026
- Critical10.0SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 85.66%Dec 28, 2025
- High8.8Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion VulnerabilityPatch nowKEVEPSS 48.87%Dec 22, 2025
- High8.8n8n Improper Control of Dynamically-Managed Code Resources VulnerabilityPatch nowKEVEPSS 98.99%Dec 19, 2025
- High8.7MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency VulnerabilityPatch nowKEVEPSS 83.22%Dec 19, 2025
- Critical9.3WatchGuard Firebox Out of Bounds Write VulnerabilityPatch nowKEVEPSS 26.51%Dec 18, 2025
- Medium6.1RoundCube Webmail Cross-site Scripting VulnerabilityPatch nowKEVEPSS 26.84%Dec 17, 2025
- Medium6.6SonicWall SMA1000 Missing Authorization VulnerabilityPatch nowKEVEPSS 2.76%Dec 17, 2025
- Critical10.0Cisco Multiple Products Improper Input Validation VulnerabilityPatch nowKEVEPSS 32.39%Dec 17, 2025
- Critical9.3ASUS Live Update Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 1.20%Dec 16, 2025
- Critical9.8Hewlett Packard Enterprise (HPE) OneView Code Injection VulnerabilityPatch nowKEVEPSS 90.19%Dec 16, 2025
- High7.5Apple iOS/iPadOS/visionOS and macOS Sequoia/Tahoe FaceTime Password DisclosurePatch nowKEVEPSS 0.86%Dec 12, 2025
- Medium5.5Apple Multiple Products Classic Buffer Overflow VulnerabilityPatch nowKEVEPSS 0.43%Dec 12, 2025
- High7.8Apple Multiple Products Improper Locking VulnerabilityPatch nowKEVEPSS 0.36%Dec 12, 2025
- High8.8Apple Multiple Products Use-After-Free WebKit VulnerabilityPatch nowKEVEPSS 8.76%Dec 12, 2025
- High7.1Gladinet CentreStack and Triofox Hard Coded Cryptographic VulnerabilityPatch nowKEVEPSS 53.30%Dec 12, 2025
- High8.8Google Chromium Out of Bounds Memory Access VulnerabilityPatch nowKEVEPSS 22.33%Dec 12, 2025
- High7.5facebook react Deserialization of Untrusted DataPatch nowKEVEPSS 66.88%Dec 11, 2025
- High8.7Gogs Path Traversal VulnerabilityPatch nowKEVEPSS 85.20%Dec 10, 2025
- Medium5.6Fortinet FortiOS Insufficient Session ExpirationPatch nowKEVEPSS 0.30%Dec 9, 2025
- Medium6.5givewp givewp Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.30%Dec 9, 2025
- Critical9.8Fortinet Multiple Products Improper Verification of Cryptographic Signature VulnerabilityPatch nowKEVEPSS 68.29%Dec 9, 2025
- High7.8Microsoft Windows Use After Free VulnerabilityPatch nowKEVEPSS 2.50%Dec 9, 2025
- Low2.1A security flaw has been discovered in D-Link DIR-823X up to 20250416.Patch nowKEVEPSS 3.39%Dec 8, 2025
Sort