Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownEdimax re11s_firmware Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 4.71%Oct 9, 2025
- UnknownTP-Link tl-wr840n_firmware Session FixationPatch nowKEVEPSS 67.06%Oct 9, 2025
- Critical9.8The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 6.6.7 via the mPatch nowKEVEPSS 0.80%Oct 8, 2025
- UnknownAMD Radeon Graphics Driver IOCTL Request VulnerabilityPatch nowKEVEPSS 0.44%Oct 8, 2025
- Critical9.8Oracle E-Business Suite Unspecified VulnerabilityPatch nowKEVEPSS 99.73%Oct 4, 2025
- Critical9.8beardev joomsport Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.66%Oct 3, 2025
- Medium5.3dify dify Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.70%Sep 30, 2025
- High7.3liquidfiles liquidfiles Authentication Bypass by Primary WeaknessPatch nowKEVEPSS 0.77%Sep 30, 2025
- Critical9.8chef automate Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 25.95%Sep 29, 2025
- High7.8Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions VulnerabilityPatch nowKEVEPSS 8.63%Sep 29, 2025
- Medium5.3fifu featured_image_from_url Insertion of Sensitive Information into Log FilePatch nowKEVEPSS 12.31%Sep 26, 2025
- High8.6Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization VulnerabilityPatch nowKEVEPSS 87.09%Sep 25, 2025
- High7.7Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution VulnerabilityPatch nowKEVEPSS 41.50%Sep 24, 2025
- Unknownb-link bl-wr9000_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 6.86%Sep 23, 2025
- Critical10.0FlowiseAI Flowise Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 86.22%Sep 22, 2025
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.74%Sep 22, 2025
- Medium6.1Libraesva Email Security Gateway Command Injection VulnerabilityPatch nowKEVEPSS 1.86%Sep 19, 2025
- Critical10.0Fortra GoAnywhere MFT Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.80%Sep 18, 2025
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.45%Sep 17, 2025
- Critical10.0Spring Cloud Gateway Server Webflux may be vulnerable to Spring Environment property modification.Patch nowKEVEPSS 3.55%Sep 16, 2025
- Unknownb-link bl-wr9000_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 10.80%Sep 15, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 86.84%Sep 15, 2025
- High7.1Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.48%Sep 14, 2025
- Unknownsigb pmb Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.17%Sep 14, 2025
- Critical9.8Samsung Mobile Devices Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 35.58%Sep 12, 2025
Sort