Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1Libraesva Email Security Gateway Command Injection VulnerabilityPatch nowKEVEPSS 1.86%Sep 19, 2025
- Critical10.0Fortra GoAnywhere MFT Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.80%Sep 18, 2025
- Critical9.3WatchGuard Firebox Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 91.80%Sep 17, 2025
- Critical9.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 6.06%Sep 17, 2025
- Critical9.8Samsung Mobile Devices Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 35.58%Sep 12, 2025
- Critical9.8Samsung Mobile Devices Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 2.22%Sep 12, 2025
- Critical9.1Adobe Commerce and Magento Improper Input Validation VulnerabilityPatch nowKEVEPSS 94.66%Sep 9, 2025
- Critical9.9FOG is a free open-source cloning/imaging/rescue suite/inventory management system.Patch nowKEVEPSS 20.89%Sep 6, 2025
- Critical9.8Linux Kernel Improper Check for Unusual or Exceptional Conditions VulnerabilityPatch nowKEVEPSS 2.88%Sep 5, 2025
- Critical9.0Sitecore Multiple Products Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 60.60%Sep 3, 2025
- High8.8Android Runtime Use-After-Free VulnerabilityPatch nowKEVEPSS 0.63%Sep 1, 2025
- Low2.1Telesquare tlr-2005ksh_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 6.25%Aug 29, 2025
- High8.6TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection VulnerabilityPatch nowKEVEPSS 37.73%Aug 29, 2025
- Critical10.0Sangoma FreePBX Authentication Bypass VulnerabilityPatch nowKEVEPSS 95.02%Aug 28, 2025
- Critical9.8D-Link dir-868l_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.97%Aug 28, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in ThemeREX Group ThemeREX Addons trx_addons allows Object Injection.This issue affects ThemeREX Addons: from n/a through 2.36.1.1.Patch nowKEVEPSS 0.53%Aug 27, 2025
- Critical9.2Citrix NetScaler Memory Overflow VulnerabilityPatch nowKEVEPSS 20.28%Aug 26, 2025
- Medium5.4Meta Platforms WhatsApp Incorrect Authorization VulnerabilityPatch nowKEVEPSS 4.73%Aug 20, 2025
- Critical10.0Apple iOS, iPadOS, and macOS Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 32.03%Aug 20, 2025
- Medium5.3Tenda ac20_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 16.65%Aug 17, 2025
- Critical9.0CWP Control Web Panel OS Command Injection VulnerabilityPatch nowKEVEPSS 99.66%Aug 15, 2025
- Critical9.4N-able N-Central Command Injection VulnerabilityPatch nowKEVEPSS 3.45%Aug 13, 2025
- Critical9.4N-able N-Central Insecure Deserialization VulnerabilityPatch nowKEVEPSS 1.90%Aug 13, 2025
- High8.4RARLAB WinRAR Path Traversal VulnerabilityPatch nowKEVEPSS 94.51%Aug 8, 2025
- Critical10.0Adobe Experience Manager Forms Code Execution VulnerabilityPatch nowKEVEPSS 88.26%Aug 5, 2025
Sort