Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Microsoft Windows Use After Free VulnerabilityPatch nowKEVEPSS 2.50%Dec 9, 2025
- Low2.1A security flaw has been discovered in D-Link DIR-823X up to 20250416.Patch nowKEVEPSS 3.39%Dec 8, 2025
- Critical9.4Langflow Origin Validation Error VulnerabilityPatch nowKEVEPSS 92.81%Dec 5, 2025
- Critical9.8Array Networks ArrayOS AG OS Command Injection VulnerabilityPatch nowKEVEPSS 3.42%Dec 5, 2025
- Critical10.0Meta React Server Components Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.80%Dec 3, 2025
- Critical9.8wpdirectorykit wp_directory_kit Incorrect Implementation of Authentication AlgorithmPatch nowKEVEPSS 4.55%Dec 3, 2025
- Critical9.8dynamiapps frontend_admin Missing AuthorizationPatch nowKEVEPSS 2.19%Dec 3, 2025
- Critical9.8acfextended advanced_custom_fields_extended Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 67.62%Dec 2, 2025
- Medium5.5Android Framework Information Disclosure VulnerabilityPatch nowKEVEPSS 0.26%Dec 1, 2025
- High7.8Android Framework Privilege Escalation VulnerabilityPatch nowKEVEPSS 0.26%Dec 1, 2025
- Critical9.4Ray-Project Ray Code Injection VulnerabilityPatch nowKEVEPSS 62.46%Nov 26, 2025
- Critical9.8OSGeo GeoServer Improper Restriction of XML External Entity Reference VulnerabilityPatch nowKEVEPSS 60.01%Nov 25, 2025
- High7.2Fortinet FortiWeb OS Command Injection VulnerabilityPatch nowKEVEPSS 54.72%Nov 18, 2025
- Medium6.5TOTOLINK a950rg_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 2.54%Nov 13, 2025
- High7.3D-Link dir-882_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 3.93%Nov 13, 2025
- Medium6.5TOTOLINK lr1200gb_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 6.61%Nov 13, 2025
- Medium6.9N-able N-central Improper Validation of Specified Quantity in InputPatch nowKEVEPSS 37.39%Nov 12, 2025
- High8.4N-able N-central Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 31.68%Nov 12, 2025
- High8.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 4.90%Nov 12, 2025
- High7.8Microsoft Windows Link Following VulnerabilityPatch nowKEVEPSS 4.61%Nov 11, 2025
- High7.0Microsoft Windows Race Condition VulnerabilityPatch nowKEVEPSS 4.46%Nov 11, 2025
- Critical9.1Gladinet Triofox Improper Access Control VulnerabilityPatch nowKEVEPSS 95.75%Nov 10, 2025
- High8.6Sangoma FreePBX OS Command Injection VulnerabilityPatch nowKEVEPSS 84.62%Nov 6, 2025
- High8.8Apple Multiple products Use-After-Free VulnerabilityPatch nowKEVEPSS 4.04%Nov 5, 2025
- Critical9.8React Native Community CLI OS Command Injection VulnerabilityPatch nowKEVEPSS 93.98%Nov 3, 2025
Sort