Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Unrestricted Upload of File with Dangerous TypeKEVEPSS 3.8%Apr 23, 2026
- UnknownMissing AuthorizationKEVEPSS 0.3%Apr 23, 2026
- Unknownmailerlite mailerlite Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVEPSS 0.4%Apr 23, 2026
- UnknownMissing AuthorizationKEVEPSS 0.2%Apr 23, 2026
- Unknowninspirythemes realhomes Incorrect Privilege AssignmentKEVEPSS 0.4%Apr 23, 2026
- UnknownUnrestricted Upload of File with Dangerous TypeKEVEPSS 0.6%Apr 23, 2026
- Critical9.3ThinkPHP ThinkPHP Authorization Bypass Through User-Controlled KeyKEVEPSS 0.9%Apr 22, 2026
- High7.8Linux Kernel Incorrect Resource Transfer Between Spheres VulnerabilityKEVEPSS 3.4%Apr 22, 2026
- UnknownApache ActiveMQ Initialization of a Resource with an Insecure DefaultKEVEPSS 7.1%Apr 22, 2026
- Unknowneyoucms eyoucms Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVEPSS 1.0%Apr 21, 2026
- Critical9.3IBM collaborative_lifecycle_management Unrestricted Upload of File with Dangerous TypeKEVEPSS 0.7%Apr 21, 2026
- High7.5LMDeploy is a toolkit for compressing, deploying, and serving large language models.KEVEPSS 1.5%Apr 20, 2026
- Unknownmjdm majordomo Improper Control of Generation of Code ('Code Injection')KEVEPSS 5.7%Apr 18, 2026
- High8.1The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file upload in versions up to, and including, 1.3.9.7.KEVEPSS 3.5%Apr 17, 2026
- High7.2The WP Statistics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'utm_source' parameter in all versions up to, and including, 14.16.4.KEVEPSS 0.4%Apr 17, 2026
- Critical9.1Use of Hard-coded Cryptographic KeyKEVEPSS 0.8%Apr 16, 2026
- Critical10.0Improper Access ControlKEVEPSS 1.2%Apr 16, 2026
- Medium6.1cusrev customer_reviews_for_woocommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVEPSS 0.3%Apr 16, 2026
- Unknownfacebook react Deserialization of Untrusted DataKEVEPSS 66.9%Apr 15, 2026
- UnknownMissing Authentication for Critical FunctionKEVEPSS 1.3%Apr 15, 2026
- UnknownWordPress wordpress Unrestricted Upload of File with Dangerous TypeKEVEPSS 15.2%Apr 15, 2026
- Critical9.8Fortinet FortiSandbox Path Traversal: '../filedir'KEVEPSS 0.7%Apr 14, 2026
- Medium6.5Fortinet Multiple Products Path Traversal VulnerabilityKEVEPSS 1.1%Apr 14, 2026
- High7.8Microsoft Defender Insufficient Granularity of Access Control VulnerabilityKEVEPSS 0.4%Apr 14, 2026
- Critical9.8Microsoft Internet Key Exchange (IKE) Service Extensions Double Free VulnerabilityKEVEPSS 1.6%Apr 14, 2026