Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0Cisco Multiple Products Improper Input Validation VulnerabilityPatch nowKEVEPSS 32.39%Dec 17, 2025
- Unknownninjaforms ninja_forms Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 0.44%Dec 17, 2025
- Critical9.3ASUS Live Update Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 1.20%Dec 16, 2025
- Critical9.8Hewlett Packard Enterprise (HPE) OneView Code Injection VulnerabilityPatch nowKEVEPSS 90.19%Dec 16, 2025
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.83%Dec 15, 2025
- Unknownappsmith appsmith Improper Access ControlPatch nowKEVEPSS 30.66%Dec 15, 2025
- UnknownTOTOLINK a3002ru Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.99%Dec 15, 2025
- High8.8Apple Multiple Products Use-After-Free WebKit VulnerabilityPatch nowKEVEPSS 8.76%Dec 12, 2025
- High7.1Gladinet CentreStack and Triofox Hard Coded Cryptographic VulnerabilityPatch nowKEVEPSS 53.30%Dec 12, 2025
- High8.8Google Chromium Out of Bounds Memory Access VulnerabilityPatch nowKEVEPSS 22.33%Dec 12, 2025
- High8.7Gogs Path Traversal VulnerabilityPatch nowKEVEPSS 85.20%Dec 10, 2025
- Medium5.6Fortinet FortiOS Insufficient Session ExpirationPatch nowKEVEPSS 0.30%Dec 9, 2025
- High7.8Microsoft Windows Use After Free VulnerabilityPatch nowKEVEPSS 2.50%Dec 9, 2025
- Unknownmate-desktop atril Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.08%Dec 8, 2025
- UnknownApache log4j Deserialization of Untrusted DataPatch nowKEVEPSS 1.91%Dec 8, 2025
- Unknownpostgresql postgresql_jdbc_driver Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.35%Dec 8, 2025
- Critical9.4Langflow Origin Validation Error VulnerabilityPatch nowKEVEPSS 92.81%Dec 5, 2025
- Critical9.8Array Networks ArrayOS AG OS Command Injection VulnerabilityPatch nowKEVEPSS 3.42%Dec 5, 2025
- Unknownsir gnuboard URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 0.53%Dec 5, 2025
- Critical10.0Meta React Server Components Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.80%Dec 3, 2025
- Critical9.8wpdirectorykit wp_directory_kit Incorrect Implementation of Authentication AlgorithmPatch nowKEVEPSS 4.55%Dec 3, 2025
- Critical9.8dynamiapps frontend_admin Missing AuthorizationPatch nowKEVEPSS 2.19%Dec 3, 2025
- Unknownprovectus ui Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 86.84%Dec 2, 2025
- UnknownWSO2 api_control_plane Authentication Bypass by SpoofingPatch nowKEVEPSS 0.85%Nov 28, 2025
- Unknownservmask all-in-one_wp_migration Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.20%Nov 28, 2025
Sort