Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownchanjetvip t\+ Deserialization of Untrusted DataPatch nowKEVEPSS 1.10%Jan 15, 2026
- UnknownIncorrect Privilege AssignmentPatch nowKEVEPSS 21.39%Jan 14, 2026
- Unknownlanggenius dify Improper Access ControlPatch nowKEVEPSS 29.93%Jan 14, 2026
- UnknownXWiki xwiki Improper Access ControlPatch nowKEVEPSS 1.47%Jan 14, 2026
- UnknownLG lg_led_assistant Path Traversal: '.../...//'Patch nowKEVEPSS 64.00%Jan 14, 2026
- UnknownSaltStack Salt Improper AuthenticationPatch nowKEVEPSS 73.13%Jan 14, 2026
- UnknownSAP Solution Manager URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 2.20%Jan 14, 2026
- Unknownepiserver episerver Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 4.65%Jan 14, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 29.20%Jan 13, 2026
- Critical9.8Fortinet Multiple Products Heap-based Buffer Overflow VulnerabilityPatch nowKEVEPSS 3.80%Jan 13, 2026
- Medium5.5Microsoft Windows Information Disclosure VulnerabilityPatch nowKEVEPSS 7.46%Jan 13, 2026
- Unknownn8n n8n Improper Input ValidationPatch nowKEVEPSS 78.19%Jan 9, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.30%Jan 9, 2026
- UnknownRed Hat build_of_keycloak URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 2.11%Jan 8, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 12.05%Jan 7, 2026
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 20.23%Jan 5, 2026
- UnknownD-Link dir-600 Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.97%Jan 5, 2026
- Unknownwpmudev branda Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 1.86%Jan 2, 2026
- UnknownMissing Authentication for Critical FunctionPatch nowKEVEPSS 0.48%Dec 31, 2025
- UnknownGargoyle Authenticated 'run_commands.sh' OS Command ExecutionPatch nowKEVEPSS 0.73%Dec 31, 2025
- Critical10.0SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 85.66%Dec 28, 2025
- UnknownImproper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 20.42%Dec 27, 2025
- UnknownAdobe ColdFusion Deserialization of Untrusted DataPatch nowKEVEPSS 80.18%Dec 26, 2025
- UnknownAdobe ColdFusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 84.81%Dec 26, 2025
- Unknownpercha com_perchagallery Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 15.78%Dec 26, 2025