Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownIncorrect Privilege AssignmentPatch nowKEVEPSS 0.51%Jan 16, 2026
- Unknownui unifi_access Missing Authentication for Critical FunctionPatch nowKEVEPSS 41.09%Jan 16, 2026
- UnknownFortinet FortiSIEM Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 42.54%Jan 15, 2026
- Unknownchanjetvip t\+ Deserialization of Untrusted DataPatch nowKEVEPSS 1.10%Jan 15, 2026
- UnknownIncorrect Privilege AssignmentPatch nowKEVEPSS 21.39%Jan 14, 2026
- Unknownlanggenius dify Improper Access ControlPatch nowKEVEPSS 29.93%Jan 14, 2026
- UnknownXWiki xwiki Improper Access ControlPatch nowKEVEPSS 1.47%Jan 14, 2026
- UnknownLG lg_led_assistant Path Traversal: '.../...//'Patch nowKEVEPSS 64.00%Jan 14, 2026
- UnknownSaltStack Salt Improper AuthenticationPatch nowKEVEPSS 73.13%Jan 14, 2026
- UnknownSAP Solution Manager URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 2.20%Jan 14, 2026
- Unknownepiserver episerver Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 4.65%Jan 14, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 29.20%Jan 13, 2026
- Critical9.8Fortinet Multiple Products Heap-based Buffer Overflow VulnerabilityPatch nowKEVEPSS 3.80%Jan 13, 2026
- Medium5.5Microsoft Windows Information Disclosure VulnerabilityPatch nowKEVEPSS 7.46%Jan 13, 2026
- Critical9.1mindsdb mindsdb Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 20.26%Jan 12, 2026
- High8.1Apache Struts Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 45.85%Jan 11, 2026
- Unknownn8n n8n Improper Input ValidationPatch nowKEVEPSS 78.19%Jan 9, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.30%Jan 9, 2026
- UnknownRed Hat build_of_keycloak URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 2.11%Jan 8, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 12.05%Jan 7, 2026
- Unknownw3eden download_manager Missing Support for Integrity CheckPatch nowKEVEPSS 0.20%Jan 6, 2026
- High7.5comfy comfyui-manager Unprotected Alternate ChannelPatch nowKEVEPSS 1.39%Jan 5, 2026
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 20.23%Jan 5, 2026
- UnknownD-Link dir-600 Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.97%Jan 5, 2026
- High8.8Langflow Langflow Missing Authentication for Critical FunctionPatch nowKEVEPSS 33.29%Jan 2, 2026
Sort