Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownSolarWinds webhelpdesk Use of Hard-coded CredentialsPatch nowKEVEPSS 0.32%Jul 29, 2025
- Critical9.3oscommerce online_merchant Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 4.56%Jul 23, 2025
- Medium6.1Qwizcards Reflected Cross-Site Scripting (XSS)Patch nowKEVEPSS 0.50%Jul 23, 2025
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.66%Jul 23, 2025
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.63%Jul 23, 2025
- High7.8Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition VulnerabilityPatch nowKEVEPSS 1.36%Jul 22, 2025
- High8.8letta letta Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.11%Jul 22, 2025
- UnknownImproper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 53.26%Jul 21, 2025
- Unknownopmc woocommerce_dropshipping Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.03%Jul 21, 2025
- UnknownTOTOLINK n600r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.54%Jul 21, 2025
- High7.5Prettier eslint-config-prettier Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 5.13%Jul 19, 2025
- Critical9.8CrushFTP Unprotected Alternate Channel VulnerabilityPatch nowKEVEPSS 93.47%Jul 18, 2025
- Critical9.2Laravel Livewire Code Injection VulnerabilityPatch nowKEVEPSS 96.28%Jul 17, 2025
- Unknownerudika scoold Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 1.03%Jul 17, 2025
- Critical9.3netis-systems netcore_router_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 20.77%Jul 16, 2025
- Critical10.0Cisco Identity Services Engine Injection VulnerabilityPatch nowKEVEPSS 74.50%Jul 16, 2025
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.32%Jul 16, 2025
- UnknownCisco Identity Services Engine Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.74%Jul 16, 2025
- Critical9.8Missing AuthorizationPatch nowKEVEPSS 51.29%Jul 15, 2025
- High8.8Google Chromium ANGLE and GPU Improper Input Validation VulnerabilityPatch nowKEVEPSS 10.93%Jul 15, 2025
- Unknownniceforyou linear_emerge_e3_access_control_firmware Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.43%Jul 13, 2025
- UnknownTOTOLINK n600r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.54%Jul 13, 2025
- UnknownTOTOLINK n600r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.87%Jul 13, 2025
- Critical10.0aishu anyshare_cloud Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 0.81%Jul 11, 2025
- Medium5.3Tenda o3_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 12.62%Jul 10, 2025
Sort