Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownproperfraction profilepress Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.92%Sep 16, 2026
- UnknownUse of Hard-coded Cryptographic KeyPatch nowKEVEPSS 0.69%Sep 15, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.38%Sep 15, 2026
- UnknownStellarWP the_events_calendar Deserialization of Untrusted DataPatch nowKEVEPSS 1.47%Sep 12, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.39%Sep 10, 2026
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.59%Sep 10, 2026
- Unknownsensiolabs symfony Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 63.60%Sep 10, 2026
- UnknownImproper AuthenticationPatch nowKEVEPSS 2.91%Sep 9, 2026
- Unknownpickplugins comboblocks Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.45%Sep 4, 2026
- UnknownUnauthenticated PHP Object Injection to Remote Code Execution on GiveWPPatch nowKEVEPSS 2.25%Aug 28, 2026
- UnknownThemeum tutor_lms Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 0.62%Aug 28, 2026
- UnknownMiniOrange saml_sp_single_sign_on Improper AuthenticationPatch nowKEVEPSS 2.36%Aug 21, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.83%Aug 21, 2026
- UnknownSPIP SPIP Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.29%Aug 20, 2026
- High8.1motopress restaurant_menu Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.47%Aug 18, 2026
- Unknownpodsfoundation pods Incorrect AuthorizationPatch nowKEVEPSS 3.52%Aug 15, 2026
- UnknownDeserialization of Untrusted DataPatch nowKEVEPSS 0.56%Aug 4, 2026
- Unknownwpmanageninja ninja_tables Embedded Malicious CodePatch nowKEVEPSS 0.65%Aug 1, 2026
- UnknownEmbedded Malicious CodePatch nowKEVEPSS 0.67%Aug 1, 2026
- Critical9.3vBulletin vBulletin Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 5.61%Jul 27, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 8.04%Jul 21, 2026
- Unknownphpbb phpbb Improper AuthenticationPatch nowKEVEPSS 2.89%Jul 20, 2026
- Unknowncreativethemes blocksy_companion Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.57%Jul 2, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.48%Jul 2, 2026
- Unknownberqier berqwp Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.98%Jun 23, 2026
Sort