Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownSchneider Electric u.motion_builder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.47%Mar 5, 2026
- Critical10.0Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 43.17%Mar 4, 2026
- Critical10.0Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 88.47%Mar 4, 2026
- High7.5Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.57%Mar 4, 2026
- Critical9.2Qwik is a performance focused javascript framework.Patch nowKEVEPSS 2.95%Mar 3, 2026
- High7.8Qualcomm Multiple Chipsets Memory Corruption VulnerabilityPatch nowKEVEPSS 1.29%Mar 2, 2026
- Critical9.8WPEverest user_registration_\&_membership Improper Privilege ManagementPatch nowKEVEPSS 28.54%Mar 2, 2026
- Medium5.5A flaw has been found in MaxSite CMS up to 109.1.Patch nowKEVEPSS 2.53%Mar 1, 2026
- High7.5Themeum tutor_lms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.50%Feb 28, 2026
- Critical9.3openDCIM version 23.04, through commit 4467e9c4, contains an OS command injection vulnerability in report_network_map.php.Patch nowKEVEPSS 9.40%Feb 27, 2026
- Critical9.3openDCIM version 23.04, through commit 4467e9c4, contains a missing authorization vulnerability in install.php and container-install.php.Patch nowKEVEPSS 2.12%Feb 27, 2026
- High7.5Gradio is an open-source Python package designed for quick prototyping.Patch nowKEVEPSS 2.54%Feb 27, 2026
- High7.2WeGIA is a web manager for charitable institutions.Patch nowKEVEPSS 3.93%Feb 27, 2026
- High7.5The WP Responsive Images plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0 via the 'src' parameter.Patch nowKEVEPSS 1.87%Feb 26, 2026
- Unknowndjangoproject django Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 12.82%Feb 26, 2026
- UnknownExposed IOCTL with Insufficient Access ControlPatch nowKEVEPSS 0.52%Feb 26, 2026
- Critical9.3Juniper junos_os_evolved Incorrect Permission Assignment for Critical ResourcePatch nowKEVEPSS 18.48%Feb 25, 2026
- High8.1Broadcom VMware Aria Operations Command Injection VulnerabilityPatch nowKEVEPSS 18.32%Feb 25, 2026
- High7.5Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityPatch nowKEVEPSS 31.48%Feb 25, 2026
- High7.5Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format VulnerabilityPatch nowKEVEPSS 7.32%Feb 25, 2026
- Medium5.4Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs VulnerabilityPatch nowKEVEPSS 25.80%Feb 25, 2026
- Critical10.0Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass VulnerabilityPatch nowKEVEPSS 89.29%Feb 25, 2026
- UnknownCountry State City Dropdown CF7 ‘cnt’ and 'sid' SQL InjectionPatch nowKEVEPSS 13.62%Feb 25, 2026
- Critical9.8FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE).Patch nowKEVEPSS 5.49%Feb 24, 2026
- UnknownMicrosoft Windows External Control of File Name or PathPatch nowKEVEPSS 0.84%Feb 24, 2026
Sort