Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.41%Oct 20, 2026
- High8.7Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.39%Oct 20, 2026
- High8.7Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.41%Oct 20, 2026
- High8.7Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.68%Oct 20, 2026
- Medium5.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.21%Oct 20, 2026
- Medium5.1dedecms dedecms Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.21%Oct 20, 2026
- Medium5.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.21%Oct 20, 2026
- Medium5.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.21%Oct 20, 2026
- Medium5.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.21%Oct 20, 2026
- High8.7Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.41%Oct 20, 2026
- Critical9.8LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' ParameterPatch nowKEVEPSS 0.44%Oct 16, 2026
- UnknownExternal Control of File Name or PathPatch nowKEVEPSS 0.37%Oct 15, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.50%Oct 13, 2026
- Criticaltheme-fusion avada_builder Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.43%Oct 9, 2026
- UnknownExternal Control of File Name or PathPatch nowKEVEPSS 3.32%Oct 7, 2026
- UnknownD-Link dap-1360_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.06%Oct 5, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.59%Oct 2, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.36%Oct 2, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.53%Oct 2, 2026
- Critical9.8Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityPatch nowKEVEPSS 1.82%Sep 30, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.55%Sep 30, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.45%Sep 30, 2026
- UnknownExternal Control of File Name or PathPatch nowKEVEPSS 0.99%Sep 29, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.48%Sep 29, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.71%Sep 28, 2026
Sort