Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.2Qwik is a performance focused javascript framework.Patch nowKEVEPSS 2.88%Mar 3, 2026
- High7.8Qualcomm Multiple Chipsets Memory Corruption VulnerabilityPatch nowKEVEPSS 1.26%Mar 2, 2026
- Critical9.8WPEverest user_registration_\&_membership Improper Privilege ManagementPatch nowKEVEPSS 27.99%Mar 2, 2026
- Medium5.5A flaw has been found in MaxSite CMS up to 109.1.Patch nowKEVEPSS 2.47%Mar 1, 2026
- High7.5Themeum tutor_lms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.49%Feb 28, 2026
- Critical9.3openDCIM version 23.04, through commit 4467e9c4, contains an OS command injection vulnerability in report_network_map.php.Patch nowKEVEPSS 9.40%Feb 27, 2026
- Critical9.3openDCIM version 23.04, through commit 4467e9c4, contains a missing authorization vulnerability in install.php and container-install.php.Patch nowKEVEPSS 2.12%Feb 27, 2026
- High7.5Gradio is an open-source Python package designed for quick prototyping.Patch nowKEVEPSS 2.54%Feb 27, 2026
- High7.2WeGIA is a web manager for charitable institutions.Patch nowKEVEPSS 3.93%Feb 27, 2026
- High7.5The WP Responsive Images plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0 via the 'src' parameter.Patch nowKEVEPSS 1.76%Feb 26, 2026
- Unknowndjangoproject django Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 12.82%Feb 26, 2026
- UnknownExposed IOCTL with Insufficient Access ControlPatch nowKEVEPSS 0.52%Feb 26, 2026
- Critical9.3Juniper junos_os_evolved Incorrect Permission Assignment for Critical ResourcePatch nowKEVEPSS 18.38%Feb 25, 2026
- High8.1Broadcom VMware Aria Operations Command Injection VulnerabilityPatch nowKEVEPSS 18.08%Feb 25, 2026
- High7.5Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityPatch nowKEVEPSS 32.43%Feb 25, 2026
- High7.5Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format VulnerabilityPatch nowKEVEPSS 7.22%Feb 25, 2026
- Medium5.4Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs VulnerabilityPatch nowKEVEPSS 25.48%Feb 25, 2026
- Critical10.0Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass VulnerabilityPatch nowKEVEPSS 88.48%Feb 25, 2026
- UnknownCountry State City Dropdown CF7 ‘cnt’ and 'sid' SQL InjectionPatch nowKEVEPSS 13.62%Feb 25, 2026
- Critical9.8FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE).Patch nowKEVEPSS 5.73%Feb 24, 2026
- UnknownMicrosoft Windows External Control of File Name or PathPatch nowKEVEPSS 0.84%Feb 24, 2026
- UnknownCisco Identity Services Engine Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 6.21%Feb 24, 2026
- UnknownLeap13 premium_addons_for_elementor Missing AuthorizationPatch nowKEVEPSS 0.76%Feb 23, 2026
- UnknownHikvision intercom_broadcast_system Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 89.14%Feb 23, 2026
- High7.3Missing AuthorizationPatch nowKEVEPSS 0.60%Feb 20, 2026