Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Unverified Password ChangePatch nowKEVEPSS 0.66%Jul 9, 2025
- High8.0Git Link Following VulnerabilityPatch nowKEVEPSS 4.38%Jul 8, 2025
- Medium6.5Microsoft SharePoint Improper Authentication VulnerabilityPatch nowKEVEPSS 99.09%Jul 8, 2025
- High8.8Microsoft SharePoint Code Injection VulnerabilityPatch nowKEVEPSS 100.00%Jul 8, 2025
- UnknownMissing Authentication for Critical FunctionPatch nowKEVEPSS 10.15%Jul 2, 2025
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 39.68%Jul 2, 2025
- Unknowntechnicolor tc7200_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 17.71%Jul 2, 2025
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.51%Jul 1, 2025
- Unknownlive555 streaming_media Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.85%Jul 1, 2025
- High8.1Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 14.14%Jun 30, 2025
- Critical9.3Sudo Inclusion of Functionality from Untrusted Control Sphere VulnerabilityPatch nowKEVEPSS 55.50%Jun 30, 2025
- UnknownExposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.01%Jun 28, 2025
- UnknownExposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.75%Jun 28, 2025
- Unknownstitionai devika External Control of File Name or PathPatch nowKEVEPSS 2.07%Jun 28, 2025
- Unknowndataease dataease Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 15.88%Jun 28, 2025
- UnknownMissing AuthorizationPatch nowKEVEPSS 1.75%Jun 27, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.43%Jun 26, 2025
- UnknownWeaver e-office Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.88%Jun 26, 2025
- Critical10.0Cisco Identity Services Engine Injection VulnerabilityPatch nowKEVEPSS 97.60%Jun 25, 2025
- Critical9.2Citrix NetScaler ADC and Gateway Buffer Overflow VulnerabilityPatch nowKEVEPSS 10.56%Jun 25, 2025
- Unknownvendure vendure Improper Input ValidationPatch nowKEVEPSS 60.42%Jun 25, 2025
- Critical10.0Quest KACE Systems Management Appliance (SMA) Improper Authentication VulnerabilityPatch nowKEVEPSS 2.49%Jun 24, 2025
- Unknownnavidrome navidrome Improper AuthenticationPatch nowKEVEPSS 0.98%Jun 24, 2025
- Unknownalibaba fastjson Inclusion of Functionality from Untrusted Control SpherePatch nowKEVEPSS 0.76%Jun 23, 2025
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilityPatch nowKEVEPSS 1.71%Jun 23, 2025
Sort