Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3D-Link dns-343_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 9.81%Oct 29, 2025
- UnknownAdobe experience_manager XML Injection (aka Blind XPath Injection)Patch nowKEVEPSS 1.71%Oct 28, 2025
- Unknownhancom anysign4pc Path Traversal: '../filedir'Patch nowKEVEPSS 1.30%Oct 27, 2025
- UnknownListingPro - WordPress Directory & Listing '~/listingpro-plugin/functions.php' VulnerabilityPatch nowKEVEPSS 1.61%Oct 27, 2025
- UnknownSonicWall sma_200_firmware Improper AuthenticationPatch nowKEVEPSS 0.91%Oct 23, 2025
- Unknownamttgroup hibos Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 7.36%Oct 22, 2025
- Critical9.8Oracle marketing Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.60%Oct 21, 2025
- Critical9.8Oracle marketing Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.65%Oct 21, 2025
- Critical9.8Oracle Fusion Middleware Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 88.65%Oct 21, 2025
- Critical10.0geovision gv-bx1500_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.27%Oct 20, 2025
- Unknownairlink101 skyipcam1620w_wireless_n_mpeg4_3gpp_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 16.99%Oct 19, 2025
- UnknownJetBrains TeamCity Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 54.01%Oct 17, 2025
- Unknownmjdm majordomo Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 38.01%Oct 17, 2025
- UnknownZyxel usg40_firmware Improper AuthenticationPatch nowKEVEPSS 95.13%Oct 17, 2025
- UnknownTRUfusion Enterprise Authentication BypassPatch nowKEVEPSS 2.20%Oct 16, 2025
- Critical9.8Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.98%Oct 14, 2025
- High7.8Microsoft Windows Improper Access Control VulnerabilityPatch nowKEVEPSS 2.66%Oct 14, 2025
- High8.7Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.46%Oct 14, 2025
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.53%Oct 14, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.56%Oct 14, 2025
- UnknownFour-Faith f3x36_firmware Active Debug CodePatch nowKEVEPSS 3.04%Oct 13, 2025
- Unknownrbaskets request_baskets Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 6.59%Oct 13, 2025
- Unknownfile_away_project file_away Use of a Broken or Risky Cryptographic AlgorithmPatch nowKEVEPSS 1.69%Oct 12, 2025
- Critical9.8Improper Privilege ManagementPatch nowKEVEPSS 0.62%Oct 11, 2025
- UnknownDell unity_operating_environment Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 66.43%Oct 9, 2025
Sort