Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownapusthemes superio Incorrect Privilege AssignmentPatch nowKEVEPSS 0.66%Jan 22, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.77%Jan 22, 2026
- UnknownInfiray cmd_string URL Parameter Arbitraty Command ExecutionPatch nowKEVEPSS 1.55%Jan 22, 2026
- Critical9.8GNU InetUtils Argument Injection VulnerabilityPatch nowKEVEPSS 98.98%Jan 21, 2026
- Critical9.8Cisco Unified Communications Products Code Injection VulnerabilityPatch nowKEVEPSS 4.54%Jan 21, 2026
- Unknownla-studioweb element_kit_for_elementor Improper Privilege ManagementPatch nowKEVEPSS 1.12%Jan 21, 2026
- Unknownmjobtime mjobtime Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.00%Jan 21, 2026
- Unknownkodezen academy_lms Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 0.41%Jan 21, 2026
- Unknownappspace appspace Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 61.27%Jan 21, 2026
- Critical10.0Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control VulnerabilityPatch nowKEVEPSS 73.19%Jan 20, 2026
- UnknownTenda o3_firmware Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 0.96%Jan 20, 2026
- UnknownIncorrect Privilege AssignmentPatch nowKEVEPSS 0.39%Jan 20, 2026
- UnknownFirefox Incorrect Handle Sandbox EscapePatch nowKEVEPSS 1.94%Jan 20, 2026
- Unknown7-Zip 7-Zip Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 27.00%Jan 20, 2026
- UnknownZyxel vmg4325-b10a_firmware Improper AuthenticationPatch nowKEVEPSS 13.65%Jan 20, 2026
- UnknownExposure of Private Personal Information to an Unauthorized ActorPatch nowKEVEPSS 0.79%Jan 20, 2026
- UnknownHidden FunctionalityPatch nowKEVEPSS 1.15%Jan 20, 2026
- Unknowncalibre-ebook calibre Incorrect AuthorizationPatch nowKEVEPSS 84.12%Jan 20, 2026
- UnknownTP-Link tl-wr845n_firmware Use of Hard-coded CredentialsPatch nowKEVEPSS 1.15%Jan 20, 2026
- UnknownOut-of-bounds WritePatch nowKEVEPSS 1.29%Jan 20, 2026
- Unknownphpmyfaq phpmyfaq Exposure of Sensitive Information Through Data QueriesPatch nowKEVEPSS 2.14%Jan 18, 2026
- Unknownbusinessdirectoryplugin business_directory Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 10.36%Jan 18, 2026
- UnknownIncorrect Privilege AssignmentPatch nowKEVEPSS 0.51%Jan 16, 2026
- Unknownui unifi_access Missing Authentication for Critical FunctionPatch nowKEVEPSS 41.09%Jan 16, 2026
- UnknownFortinet FortiSIEM Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 42.54%Jan 15, 2026