Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownDrayTek vigor3900_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.14%Aug 22, 2025
- UnknownDrayTek vigor300b_firmware Out-of-bounds WritePatch nowKEVEPSS 5.54%Aug 22, 2025
- Medium5.4Meta Platforms WhatsApp Incorrect Authorization VulnerabilityPatch nowKEVEPSS 4.73%Aug 20, 2025
- Critical10.0Apple iOS, iPadOS, and macOS Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 32.03%Aug 20, 2025
- UnknownWHMpress whmcs Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 3.29%Aug 20, 2025
- Unknownlangchain langchain Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 47.63%Aug 20, 2025
- UnknownLangChain Experimental '__import__' Arbitrary Code Execution VulnerabilityPatch nowKEVEPSS 1.04%Aug 20, 2025
- Medium6.9astro astro Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.64%Aug 19, 2025
- UnknownArcserve udp Incorrect AuthorizationPatch nowKEVEPSS 39.77%Aug 19, 2025
- Unknowngurock testrail Direct Request ('Forced Browsing')Patch nowKEVEPSS 47.49%Aug 18, 2025
- Unknownossrs simple_realtime_server Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 8.69%Aug 17, 2025
- UnknownExtensive VC Addons for WPBakery Php Extract Function Unauthenticated RCEPatch nowKEVEPSS 55.46%Aug 17, 2025
- Critical9.0CWP Control Web Panel OS Command Injection VulnerabilityPatch nowKEVEPSS 99.66%Aug 15, 2025
- Critical9.8FlowiseAI Flowise Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 22.37%Aug 14, 2025
- Critical9.9Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.65%Aug 12, 2025
- UnknownApache Superset Deserialization of Untrusted DataPatch nowKEVEPSS 35.45%Aug 12, 2025
- UnknownIBM data_risk_manager Use of Hard-coded CredentialsPatch nowKEVEPSS 71.95%Aug 12, 2025
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 23.46%Aug 11, 2025
- High8.7XWiki xwiki Exposure of Private Personal Information to an Unauthorized ActorPatch nowKEVEPSS 1.37%Aug 5, 2025
- Critical9.8Trend Micro Apex One OS Command Injection VulnerabilityPatch nowKEVEPSS 23.92%Aug 5, 2025
- Critical9.1Dassault Systèmes DELMIA Apriso Missing Authorization VulnerabilityPatch nowKEVEPSS 73.57%Aug 4, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 38.04%Aug 2, 2025
- Unknownakamai cloudtest Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 2.14%Jul 31, 2025
- Critical10.0Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.10%Jul 31, 2025
- UnknownApple iOS/macOS/tvOS/watchOS 'libxpc' VulnerabilityPatch nowKEVEPSS 13.48%Jul 30, 2025
Sort