Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.0Sitecore Multiple Products Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 60.60%Sep 3, 2025
- UnknownFortinet FortiWeb Improper Handling of ParametersPatch nowKEVEPSS 10.08%Sep 1, 2025
- UnknownAdobe experience_manager_forms Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 77.46%Aug 12, 2025
- Critical10.0Adobe Experience Manager Forms Code Execution VulnerabilityPatch nowKEVEPSS 88.26%Aug 5, 2025
- Critical9.1Dassault Systèmes DELMIA Apriso Missing Authorization VulnerabilityPatch nowKEVEPSS 73.67%Aug 4, 2025
- UnknownImproper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 9.14%Aug 4, 2025
- Critical9.0CWP Control Web Panel OS Command Injection VulnerabilityPatch nowKEVEPSS 99.66%Aug 4, 2025
- UnknownOSGeo GeoServer Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 2.30%Jul 31, 2025
- Unknownmongoosejs mongoose Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.98%Jul 28, 2025
- Unknownakamai cloudtest Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 2.14%Jul 21, 2025
- UnknownGrafana Labs Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 97.08%Jul 21, 2025
- Critical9.8CrushFTP Unprotected Alternate Channel VulnerabilityPatch nowKEVEPSS 93.47%Jul 18, 2025
- UnknownMicrosoft SharePoint Improper AuthenticationPatch nowKEVEPSS 99.89%Jul 18, 2025
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 100.00%Jul 18, 2025
- Critical9.8Missing AuthorizationPatch nowKEVEPSS 51.29%Jul 15, 2025
- Critical9.8simplefilelist simple_file_list Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 43.52%Jul 12, 2025
- Critical9.8Fortinet FortiWeb SQL Injection VulnerabilityPatch nowKEVEPSS 99.92%Jul 11, 2025
- Critical10.0Wing FTP Server Improper Neutralization of Null Byte or NUL Character VulnerabilityPatch nowKEVEPSS 93.88%Jul 10, 2025
- Critical10.0Cisco Identity Services Engine Injection VulnerabilityPatch nowKEVEPSS 97.60%Jun 25, 2025
- Critical10.0Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 15.40%Jun 23, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 52.19%Jun 20, 2025
- High8.8Sitecore experience_commerce Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 30.45%Jun 17, 2025
- High8.8Sitecore experience_commerce Relative Path TraversalPatch nowKEVEPSS 24.83%Jun 17, 2025
- High7.5Sitecore experience_commerce Use of Hard-coded CredentialsPatch nowKEVEPSS 55.87%Jun 17, 2025
- Critical9.3Citrix NetScaler ADC and Gateway Out-of-Bounds Read VulnerabilityPatch nowKEVEPSS 99.97%Jun 17, 2025
Sort