Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownmcpjam inspector Missing Authentication for Critical FunctionPatch nowKEVEPSS 67.52%Feb 18, 2026
- Critical9.8Fortinet FortiClient EMS SQL Injection VulnerabilityPatch nowKEVEPSS 97.73%Feb 6, 2026
- Critical9.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityPatch nowKEVEPSS 98.64%Jan 29, 2026
- Critical9.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityPatch nowKEVEPSS 98.69%Jan 29, 2026
- Critical9.3SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 96.43%Jan 22, 2026
- Critical10.0SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 85.66%Dec 28, 2025
- High8.8Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion VulnerabilityPatch nowKEVEPSS 48.87%Dec 22, 2025
- High7.5facebook react Deserialization of Untrusted DataPatch nowKEVEPSS 66.62%Dec 11, 2025
- Critical9.8Fortinet Multiple Products Improper Verification of Cryptographic Signature VulnerabilityPatch nowKEVEPSS 68.29%Dec 9, 2025
- Critical10.0Meta React Server Components Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.80%Dec 3, 2025
- Critical9.3monstaftp monsta_ftp Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 72.68%Nov 7, 2025
- Critical9.8React Native Community CLI OS Command Injection VulnerabilityPatch nowKEVEPSS 93.98%Nov 3, 2025
- Critical9.8Oracle Fusion Middleware Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 88.65%Oct 21, 2025
- Critical9.8Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.98%Oct 14, 2025
- High7.5Oracle E-Business Suite Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 95.89%Oct 11, 2025
- Critical9.8Fortinet FortiWeb Path Traversal VulnerabilityPatch nowKEVEPSS 91.08%Oct 6, 2025
- UnknownCisco IOS XR Heap-based Buffer OverflowPatch nowKEVEPSS 6.92%Oct 6, 2025
- Critical9.8Oracle E-Business Suite Unspecified VulnerabilityPatch nowKEVEPSS 99.73%Oct 4, 2025
- UnknownDitty WordPress Plugin Unauthenticated Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 20.24%Sep 29, 2025
- High8.6Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization VulnerabilityPatch nowKEVEPSS 87.09%Sep 25, 2025
- Critical9.9Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow VulnerabilityPatch nowKEVEPSS 71.21%Sep 25, 2025
- UnknownImproper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 20.42%Sep 22, 2025
- Critical10.0Fortra GoAnywhere MFT Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.80%Sep 18, 2025
- Critical9.1Adobe Commerce and Magento Improper Input Validation VulnerabilityPatch nowKEVEPSS 94.66%Sep 9, 2025
- Critical10.0argoproj argo_cd Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 5.66%Sep 4, 2025
Sort