Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownWPS Hide Login Plugin for WordPress Login Page DisclosurePatch nowKEVEPSS 1.23%Jan 23, 2026
- Unknownevenroute iqrouter_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.23%Jan 23, 2026
- Critical9.8Langflow Inclusion of Functionality from Untrusted Control Sphere VulnerabilityPatch nowKEVEPSS 62.56%Jan 22, 2026
- Critical9.3SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 96.43%Jan 22, 2026
- UnknownTenda ac1206_firmware Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 1.75%Jan 22, 2026
- UnknownNETGEAR d6400_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 12.13%Jan 22, 2026
- UnknownTOTOLINK a3002r_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 9.12%Jan 22, 2026
- Unknownapusthemes superio Incorrect Privilege AssignmentPatch nowKEVEPSS 0.66%Jan 22, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.76%Jan 22, 2026
- UnknownInfiray cmd_string URL Parameter Arbitraty Command ExecutionPatch nowKEVEPSS 1.55%Jan 22, 2026
- Critical9.8GNU InetUtils Argument Injection VulnerabilityPatch nowKEVEPSS 98.98%Jan 21, 2026
- Critical9.8Cisco Unified Communications Products Code Injection VulnerabilityPatch nowKEVEPSS 4.54%Jan 21, 2026
- Unknownla-studioweb element_kit_for_elementor Improper Privilege ManagementPatch nowKEVEPSS 1.11%Jan 21, 2026
- Unknownmjobtime mjobtime Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.00%Jan 21, 2026
- Unknownkodezen academy_lms Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 0.41%Jan 21, 2026
- Unknownappspace appspace Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 61.27%Jan 21, 2026
- Critical10.0Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control VulnerabilityPatch nowKEVEPSS 73.19%Jan 20, 2026
- UnknownIncorrect Privilege AssignmentPatch nowKEVEPSS 0.40%Jan 20, 2026
- UnknownFirefox Incorrect Handle Sandbox EscapePatch nowKEVEPSS 1.98%Jan 20, 2026
- Unknown7-Zip 7-Zip Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 27.39%Jan 20, 2026
- UnknownZyxel vmg4325-b10a_firmware Improper AuthenticationPatch nowKEVEPSS 13.65%Jan 20, 2026
- UnknownExposure of Private Personal Information to an Unauthorized ActorPatch nowKEVEPSS 0.79%Jan 20, 2026
- UnknownHidden FunctionalityPatch nowKEVEPSS 1.15%Jan 20, 2026
- Unknowncalibre-ebook calibre Incorrect AuthorizationPatch nowKEVEPSS 84.12%Jan 20, 2026
- UnknownTP-Link tl-wr845n_firmware Use of Hard-coded CredentialsPatch nowKEVEPSS 1.15%Jan 20, 2026
Sort