Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityPatch nowKEVEPSS 98.64%Jan 29, 2026
- Critical9.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityPatch nowKEVEPSS 98.69%Jan 29, 2026
- Unknownparallels h-sphere Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.30%Jan 29, 2026
- Unknowntriliumnotes trilium Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.92%Jan 29, 2026
- Low2.1TOTOLINK a7000r_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 3.01%Jan 28, 2026
- Critical9.8SolarWinds web_help_desk Weak AuthenticationPatch nowKEVEPSS 60.64%Jan 28, 2026
- Critical9.8SolarWinds web_help_desk Deserialization of Untrusted DataPatch nowKEVEPSS 67.97%Jan 28, 2026
- Critical9.8SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 84.18%Jan 28, 2026
- Critical9.8SolarWinds Web Help Desk Security Control Bypass VulnerabilityPatch nowKEVEPSS 73.56%Jan 28, 2026
- High8.7mintplexlabs anythingllm Insertion of Sensitive Information Into Sent DataPatch nowKEVEPSS 1.69%Jan 27, 2026
- Critical9.8Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 85.80%Jan 27, 2026
- UnknownWeaver e-cology Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 0.98%Jan 27, 2026
- High7.8Microsoft Office Security Feature Bypass VulnerabilityPatch nowKEVEPSS 70.80%Jan 26, 2026
- Unknownsoftlabbd integrate_google_drive Missing AuthorizationPatch nowKEVEPSS 7.33%Jan 26, 2026
- UnknownNETGEAR Routers FunJSQ VulnerabilityPatch nowKEVEPSS 2.53%Jan 26, 2026
- UnknownGoogle Chrome Improper Input ValidationPatch nowKEVEPSS 99.59%Jan 26, 2026
- UnknownApache continuum Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 3.89%Jan 26, 2026
- Unknownphpjabbers food_delivery_script Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.32%Jan 25, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.82%Jan 25, 2026
- Critical9.3SmarterTools SmarterMail Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 88.18%Jan 23, 2026
- Critical9.8Langflow Langflow Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 41.22%Jan 23, 2026
- Critical9.8Langflow Langflow Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 23.09%Jan 23, 2026
- UnknownWPS Hide Login Plugin for WordPress Login Page DisclosurePatch nowKEVEPSS 1.23%Jan 23, 2026
- Unknownevenroute iqrouter_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.23%Jan 23, 2026
- Critical9.8Langflow Inclusion of Functionality from Untrusted Control Sphere VulnerabilityPatch nowKEVEPSS 62.56%Jan 22, 2026
Sort