Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownFlowiseAI Flowise Missing Authentication for Critical FunctionPatch nowKEVEPSS 75.20%Nov 27, 2025
- UnknownXWiki xwiki Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.37%Nov 27, 2025
- Critical9.4Ray-Project Ray Code Injection VulnerabilityPatch nowKEVEPSS 62.46%Nov 26, 2025
- Unknownfsevents_project fsevents Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.70%Nov 26, 2025
- UnknownTVT nvms-9000_firmware Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.86%Nov 24, 2025
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.62%Nov 24, 2025
- UnknownASUS asus_firmware Improper Input ValidationPatch nowKEVEPSS 1.24%Nov 19, 2025
- High8.7zentao biz Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.48%Nov 13, 2025
- Unknownsecurenvoy multi-factor_authentication_solutions Cleartext Transmission of Sensitive InformationPatch nowKEVEPSS 3.30%Nov 12, 2025
- High8.7Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.53%Nov 12, 2025
- High7.0Microsoft Windows Race Condition VulnerabilityPatch nowKEVEPSS 4.46%Nov 11, 2025
- Unknowncontrolid idsecure Improper AuthenticationPatch nowKEVEPSS 65.00%Nov 10, 2025
- Critical9.3skittles employee_records_system Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.42%Nov 10, 2025
- Unknowninsightsoftware jreport Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.21%Nov 10, 2025
- High8.7rainbowfishsoftware pacsone_server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.99%Nov 10, 2025
- Critical9.3monstaftp monsta_ftp Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 72.68%Nov 7, 2025
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.62%Nov 7, 2025
- High8.6Sangoma FreePBX OS Command Injection VulnerabilityPatch nowKEVEPSS 84.62%Nov 6, 2025
- Critical9.8meowapps ai_engine Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 74.66%Nov 5, 2025
- Critical9.8React Native Community CLI OS Command Injection VulnerabilityPatch nowKEVEPSS 93.98%Nov 3, 2025
- Critical9.8WPExperts post_smtp Missing AuthorizationPatch nowKEVEPSS 61.48%Nov 1, 2025
- UnknownApache Solr Improper AuthenticationPatch nowKEVEPSS 92.75%Oct 31, 2025
- UnknownJEECG jeecg Incorrect Permission Assignment for Critical ResourcePatch nowKEVEPSS 3.52%Oct 31, 2025
- Critical9.3kubernetes operations Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.40%Oct 30, 2025
- Medium6.5anti-malware_security_and_brute-force_firewall_project anti-malware_security_and_brute-force_firewall Missing AuthorizationPatch nowKEVEPSS 0.46%Oct 29, 2025
Sort