Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityPatch nowKEVEPSS 1.82%May 13, 2025
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 2.33%May 13, 2025
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free VulnerabilityPatch nowKEVEPSS 1.42%May 13, 2025
- High7.8Microsoft Windows DWM Core Library Use-After-Free VulnerabilityPatch nowKEVEPSS 1.92%May 13, 2025
- High7.5Microsoft Windows Scripting Engine Type Confusion VulnerabilityPatch nowKEVEPSS 27.26%May 13, 2025
- Unknownwavlink wl-wn533a8_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 3.10%May 12, 2025
- UnknownSmart Office Web Action Name Parameter Information Disclosure VulnerabilityPatch nowKEVEPSS 59.41%May 12, 2025
- Critical9.8Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 7.70%May 9, 2025
- Critical9.3sysaid sysaid Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 72.66%May 7, 2025
- Critical9.8SysAid On-Prem Improper Restriction of XML External Entity Reference VulnerabilityPatch nowKEVEPSS 64.73%May 7, 2025
- Critical9.3SysAid On-Prem Improper Restriction of XML External Entity Reference VulnerabilityPatch nowKEVEPSS 42.61%May 7, 2025
- Critical9.8Eventin Plugin REST API Privilege Escalation VulnerbailityPatch nowKEVEPSS 25.24%May 7, 2025
- Critical9.8Samsung MagicINFO 9 Server Path Traversal VulnerabilityPatch nowKEVEPSS 24.07%May 6, 2025
- Medium6.3TOTOLINK ca600-poe_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 0.94%May 1, 2025
- Critical9.8SureTriggers suretriggers Incorrect Privilege AssignmentPatch nowKEVEPSS 54.19%Apr 30, 2025
- UnknownMDaemon Email Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.64%Apr 29, 2025
- Unknownfiberhome hg6245d_firmware Use of Hard-coded CredentialsPatch nowKEVEPSS 27.82%Apr 29, 2025
- Unknownthecontrolgroup voyager Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 1.22%Apr 29, 2025
- UnknownLaravel Laravel Framework Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 86.92%Apr 29, 2025
- Unknownvitejs vite Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 74.77%Apr 28, 2025
- Critical9.1SAP NetWeaver Deserialization VulnerabilityPatch nowKEVEPSS 12.85%Apr 27, 2025
- High8.1ConnectWise ScreenConnect Improper Authentication VulnerabilityPatch nowKEVEPSS 3.54%Apr 25, 2025
- Critical9.3XWiki xwiki Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 80.01%Apr 23, 2025
- Unknownicegram email_subscribers_\&_newsletters Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 10.08%Apr 23, 2025
- Critical10.0SAP NetWeaver Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 99.49%Apr 22, 2025
Sort