Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMicrosoft Windows Group Policy Elevation of Privilege VulnerabilityPatch nowKEVEPSS 6.40%Jul 30, 2026
- Unknownbalbooa gridbox Improper Access ControlPatch nowKEVEPSS 0.52%Jul 29, 2026
- High7.8traefik traefik Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.62%Jul 22, 2026
- Critical9.3Check Point SmartConsole Improper Authentication VulnerabilityPatch nowKEVEPSS 77.97%Jul 19, 2026
- High7.2SonicWall SMA1000 Appliances Code Injection VulnerabilityPatch nowKEVEPSS 11.79%Jul 14, 2026
- High8.8Improper Privilege ManagementPatch nowKEVEPSS 0.44%Jul 11, 2026
- UnknownIvanti automation SQL Injection: HibernatePatch nowKEVEPSS 0.90%Jul 2, 2026
- Unknownfossbilling fossbilling Improper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 1.91%Jun 25, 2026
- Unknownupdraftplus updraftplus Improper Verification of Cryptographic SignaturePatch nowKEVEPSS 3.64%Jun 10, 2026
- High7.8Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output VulnerabilityPatch nowKEVEPSS 25.32%Jun 4, 2026
- Critical9.8Progress LoadMaster Command Injection VulnerabilityPatch nowKEVEPSS 77.36%Jun 4, 2026
- Critical9.8Apache Solr Use of Hard-coded CredentialsPatch nowKEVEPSS 2.84%Jun 1, 2026
- UnknownOut-of-bounds ReadPatch nowKEVEPSS 16.95%Jun 1, 2026
- Critical9.1Missing AuthorizationPatch nowKEVEPSS 0.46%May 29, 2026
- Critical9.8Missing Authentication for Critical FunctionPatch nowKEVEPSS 1.86%May 29, 2026
- Critical9.8acfextended advanced_custom_fields_extended Improper Privilege ManagementPatch nowKEVEPSS 0.87%May 28, 2026
- High8.8Improper Privilege ManagementPatch nowKEVEPSS 0.45%May 23, 2026
- Medium6.7Trend Micro Apex One (On-Premise) Directory Traversal VulnerabilityPatch nowKEVEPSS 0.54%May 21, 2026
- High8.8The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 3.28.36.Patch nowKEVEPSS 0.77%May 15, 2026
- Critical9.8The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to Authentication Bypass in versions 3.4.0 to 3.4.1.1.Patch nowKEVEPSS 3.01%May 14, 2026
- Critical10.0Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityPatch nowKEVEPSS 91.82%May 14, 2026
- High7.2Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation VulnerabilityPatch nowKEVEPSS 2.54%May 7, 2026
- Critical9.8OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.Patch nowKEVEPSS 4.68%May 5, 2026
- Unknownscriptsbundle adforest Weak Password Recovery Mechanism for Forgotten PasswordPatch nowKEVEPSS 0.72%May 5, 2026
- Unknownscriptsbundle adforest Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 1.22%May 5, 2026
Sort