Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network.Patch nowKEVEPSS 1.22%Mar 10, 2026
- High7.8Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally.Patch nowKEVEPSS 3.23%Mar 10, 2026
- High8.8Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.Patch nowKEVEPSS 2.08%Mar 10, 2026
- UnknownSangfor operation_and_maintenance_security_management_system Improper Access ControlPatch nowKEVEPSS 2.04%Mar 10, 2026
- UnknownPath Equivalence: 'filename....' (Multiple Trailing Dot)Patch nowKEVEPSS 2.66%Mar 10, 2026
- Unknowndaily_prayer_time_project daily_prayer_time Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 9.04%Mar 10, 2026
- Unknownmingsoft mcms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.41%Mar 10, 2026
- Unknowncontest_gallery contest_gallery Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 12.00%Mar 10, 2026
- Critical9.1Budibase is a low code platform for creating internal tools, workflows, and admin panels.Patch nowKEVEPSS 2.19%Mar 9, 2026
- Critical9.8The Tutor LMS Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 3.9.5 via the Social Login addon.Patch nowKEVEPSS 0.67%Mar 9, 2026
- Unknownpluginbazaar order_listener_for_woocommerce Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 9.88%Mar 9, 2026
- Unknownrevive-sas revive_adserver Deserialization of Untrusted DataPatch nowKEVEPSS 57.02%Mar 9, 2026
- Unknownzimaspace zimaos Improper AuthenticationPatch nowKEVEPSS 2.32%Mar 7, 2026
- Unknownrocketsoftware trufusion_enterprise Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.00%Mar 7, 2026
- Unknowncuppacms cuppacms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 5.14%Mar 7, 2026
- Medium6.9Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs.Patch nowKEVEPSS 2.12%Mar 6, 2026
- Critical9.8AVideo is a video-sharing Platform software.Patch nowKEVEPSS 6.77%Mar 6, 2026
- Critical9.8Nginx UI is a web user interface for the Nginx web server.Patch nowKEVEPSS 1.01%Mar 5, 2026
- UnknownSchneider Electric u.motion_builder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.47%Mar 5, 2026
- Critical10.0Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 43.17%Mar 4, 2026
- Critical10.0Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 88.18%Mar 4, 2026
- High7.5Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.54%Mar 4, 2026
- Critical9.2Qwik is a performance focused javascript framework.Patch nowKEVEPSS 2.88%Mar 3, 2026
- High7.8Qualcomm Multiple Chipsets Memory Corruption VulnerabilityPatch nowKEVEPSS 1.26%Mar 2, 2026
- Critical9.8WPEverest user_registration_\&_membership Improper Privilege ManagementPatch nowKEVEPSS 27.99%Mar 2, 2026