Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8TOTOLINK a950rg_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.36%Apr 22, 2025
- Medium6.5mojoportal mojoportal Improper Access ControlPatch nowKEVEPSS 1.97%Apr 21, 2025
- UnknownTOTOLINK n600r_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 19.58%Apr 21, 2025
- Critical9.8Improper Privilege ManagementPatch nowKEVEPSS 0.57%Apr 19, 2025
- UnknownTOTOLINK n600r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.54%Apr 19, 2025
- Critical9.2ASUS asus_firmware Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 1.13%Apr 18, 2025
- Critical9.8Qualitia Active! Mail Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 3.36%Apr 17, 2025
- Critical10.0Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 98.79%Apr 16, 2025
- Critical9.8Apple Multiple Products Arbitrary Read and Write VulnerabilityPatch nowKEVEPSS 13.86%Apr 16, 2025
- Critical9.8Apple Multiple Products Memory Corruption VulnerabilityPatch nowKEVEPSS 20.90%Apr 16, 2025
- Critical9.8TOTOLINK a810r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 34.09%Apr 15, 2025
- Critical9.3st._joe_erp_system_project st._joe_erp_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.11%Apr 14, 2025
- UnknownInstaWP instawp_connect Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 10.60%Apr 11, 2025
- Critical9.8Yiiframework Yii Improper Protection of Alternate Path VulnerabilityPatch nowKEVEPSS 87.76%Apr 9, 2025
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free VulnerabilityPatch nowKEVEPSS 13.90%Apr 8, 2025
- Critical9.8Langflow Missing Authentication VulnerabilityPatch nowKEVEPSS 99.99%Apr 7, 2025
- UnknownDell dbutildrv2.sys_firmware Improper AuthorizationPatch nowKEVEPSS 0.27%Apr 7, 2025
- UnknownMicrosoft Windows Protection Mechanism FailurePatch nowKEVEPSS 1.21%Apr 3, 2025
- UnknownFlowiseAI Flowise Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 55.87%Mar 31, 2025
- UnknownCisco meraki_mx64_firmware Failure to Handle Missing ParameterPatch nowKEVEPSS 1.14%Mar 31, 2025
- UnknownA-blog CMS Untrusted Data DeserializationPatch nowKEVEPSS 0.50%Mar 28, 2025
- Unknownvercel next.js Improper AuthorizationPatch nowKEVEPSS 99.22%Mar 28, 2025
- UnknownCodeDropz drag_and_drop_multiple_file_upload_-_contact_form_7 Deserialization of Untrusted DataPatch nowKEVEPSS 0.59%Mar 27, 2025
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 78.36%Mar 27, 2025
- Unknowngivewp givewp Deserialization of Untrusted DataPatch nowKEVEPSS 32.40%Mar 27, 2025
Sort