Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.4A vulnerability has been identified in Siemens Software Center (All versions).Patch nowKEVEPSS 0.24%Oct 15, 2026
- Critical9.3ipv4: validate checksum_start before completing checksumPatch nowKEVEPSS 0.32%Oct 15, 2026
- Critical9.8The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 7.2.1.Patch nowKEVEPSS 0.29%Oct 15, 2026
- High7.1Document Gallery <= 5.1.1 - Reflected XSS via data-shortcode AttributePatch nowKEVEPSS 0.15%Oct 15, 2026
- High8.1Improper AuthenticationPatch nowKEVEPSS 0.43%Oct 15, 2026
- Critical9.3The vulnerability exists within internal components of BeyondTrust’s Remote Support product.Patch nowKEVEPSS 1.18%Oct 15, 2026
- Critical9.8Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files.Patch nowKEVEPSS 28.31%Oct 14, 2026
- Critical9.8The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage() function.Patch nowKEVEPSS 0.79%Oct 14, 2026
- Critical9.8Cisco Secure Email Gateway Relative Path Traversal VulnerabilityPatch nowKEVEPSS 1.57%Oct 14, 2026
- High8.5JVN#88474777: SiteGuard Server Edition vulnerable to OS command injectionPatch nowKEVEPSS 1.17%Oct 14, 2026
- Medium5.3External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin".Patch nowKEVEPSS 0.22%Oct 14, 2026
- High8.6Palo Alto Networks PAN-OS Code Injection VulnerabilityPatch nowKEVEPSS 1.21%Oct 14, 2026
- Critical9.8Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via Guest Persistent Cart meta_valuePatch nowKEVEPSS 0.45%Oct 13, 2026
- Critical9.2Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.23%Oct 13, 2026
- High8.8Microsoft Windows Command Injection VulnerabilityPatch nowKEVEPSS 1.51%Oct 13, 2026
- Critical9.8Arbitrary file write in grpc phQueryMasterPatch nowKEVEPSS 0.46%Oct 13, 2026
- High8.6Ivanti Connect Secure Authentication Bypass by Spoofing VulnerabilityPatch nowKEVEPSS 25.98%Oct 13, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.19%Oct 6, 2026
- Critical9.3CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian productsPatch nowKEVEPSS 12.71%Oct 5, 2026
- Critical9.3Ahsay AhsayCBS Command Injection VulnerabilityPatch nowKEVEPSS 38.31%Oct 4, 2026
- Medium5.5Ahsay AhsayCBS Improper Authentication VulnerabilityPatch nowKEVEPSS 5.79%Oct 4, 2026
- High8.7Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityPatch nowKEVEPSS 0.59%Oct 3, 2026
- Critical9.8Fortinet FortiMail Path Traversal VulnerabilityPatch nowKEVEPSS 2.20%Oct 1, 2026
- High7.1Crocoblock jetengine Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.18%Sep 30, 2026
- Critical9.8Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityPatch nowKEVEPSS 1.82%Sep 30, 2026
Sort