Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownrocketsoftware trufusion_enterprise Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.28%Mar 31, 2026
- Unknown1clickmigration 1_click_migration Exposure of Sensitive System Information Due to Uncleared Debug InformationPatch nowKEVEPSS 0.82%Mar 31, 2026
- Unknownthimpress learnpress Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.05%Mar 31, 2026
- Unknownjinher jinher_oa Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 1.85%Mar 31, 2026
- Unknown1clickmigration 1_click_migration Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.64%Mar 31, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.69%Mar 31, 2026
- Unknownthimpress learnpress Improper Access ControlPatch nowKEVEPSS 1.16%Mar 31, 2026
- Unknownewww image_optimizer Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 2.02%Mar 31, 2026
- UnknownMicrosoft .NET Framework Improper Input ValidationPatch nowKEVEPSS 76.71%Mar 31, 2026
- Unknowncarrcommunications rsvpmaker Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 6.92%Mar 31, 2026
- Low2.1A flaw has been found in Tenda CH22 1.0.0.1.Patch nowKEVEPSS 6.47%Mar 30, 2026
- Critical9.8supsystic contact_form Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 32.78%Mar 30, 2026
- Critical9.8Nginx UI is a web user interface for the Nginx web server.Patch nowKEVEPSS 2.52%Mar 30, 2026
- High7.8TrueConf Client Download of Code Without Integrity Check VulnerabilityPatch nowKEVEPSS 0.33%Mar 30, 2026
- High8.6XenForo before 2.3.9 and before 2.2.18 allows remote code execution (RCE) by authenticated, but malicious, admin users.Patch nowKEVEPSS 0.90%Mar 30, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.54%Mar 30, 2026
- High8.8Langflow Langflow Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 4.76%Mar 27, 2026
- Medium5.3The LeadConnector WordPress plugin before 3.0.22 does not have authorization in a REST route, allowing unauthenticated users to call it and overwrite existing dataPatch nowKEVEPSS 0.68%Mar 26, 2026
- Medium6.5Responsive Plus Ajax Action Arbitrary Shortcode Execution VulnerabilityPatch nowKEVEPSS 0.33%Mar 26, 2026
- High8.8The Amelia Booking plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 9.1.2.Patch nowKEVEPSS 0.57%Mar 26, 2026
- Medium6.5pickplugins product_slider_for_woocommerce Missing AuthorizationPatch nowKEVEPSS 0.35%Mar 25, 2026
- High8.7A SQL Injection vulnerability has been found in Support Board v3.7.7.Patch nowKEVEPSS 0.25%Mar 25, 2026
- High8.7Langflow is a tool for building and deploying AI-powered agents and workflows.Patch nowKEVEPSS 2.03%Mar 24, 2026
- Critical9.9Langflow is a tool for building and deploying AI-powered agents and workflows.Patch nowKEVEPSS 1.09%Mar 24, 2026
- Critical9.8Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 1.03%Mar 24, 2026
Sort