Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCisco ios_xe Use of Hard-coded CredentialsPatch nowKEVEPSS 27.49%Jun 10, 2025
- UnknownKentico Xperience CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 60.59%Jun 7, 2025
- High8.8RoundCube Webmail Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.71%Jun 1, 2025
- Critical9.0vBulletin vBulletin Improper Protection of Alternate PathPatch nowKEVEPSS 57.30%May 26, 2025
- Critical10.0vBulletin vBulletin Improper Protection of Alternate PathPatch nowKEVEPSS 75.64%May 26, 2025
- High7.2infoblox netmri Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 43.28%May 22, 2025
- Critical10.0versa-networks concerto Time-of-check Time-of-use (TOCTOU) Race ConditionPatch nowKEVEPSS 46.10%May 21, 2025
- Critical9.2Versa Concerto Improper Authentication VulnerabilityPatch nowKEVEPSS 81.78%May 21, 2025
- Critical9.8Unverified Password ChangePatch nowKEVEPSS 15.20%May 19, 2025
- Critical10.0invisioncommunity invisioncommunity Improper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 84.32%May 16, 2025
- High8.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityPatch nowKEVEPSS 88.00%May 13, 2025
- Critical9.8Fortinet Multiple Products Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 30.94%May 13, 2025
- High8.8SonicWall SMA 100 Appliances Files or Directories Accessible to External PartiesPatch nowKEVEPSS 6.45%May 7, 2025
- Critical9.8SureTriggers suretriggers Incorrect Privilege AssignmentPatch nowKEVEPSS 54.19%Apr 30, 2025
- Unknownvitejs vite Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 74.77%Apr 28, 2025
- Critical9.1SAP NetWeaver Deserialization VulnerabilityPatch nowKEVEPSS 12.85%Apr 27, 2025
- Critical9.3Commvault Command Center Path Traversal VulnerabilityPatch nowKEVEPSS 97.60%Apr 22, 2025
- Critical10.0SAP NetWeaver Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 99.49%Apr 22, 2025
- Critical10.0Craft CMS Code Injection VulnerabilityPatch nowKEVEPSS 99.79%Apr 18, 2025
- Critical9.8Langflow Missing Authentication VulnerabilityPatch nowKEVEPSS 99.99%Apr 7, 2025
- Critical9.8Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.98%Apr 3, 2025
- UnknownApache camel Improper Neutralization of Internal Special ElementsPatch nowKEVEPSS 76.09%Apr 2, 2025
- High7.5Vite Vitejs Improper Access Control VulnerabilityPatch nowKEVEPSS 65.76%Mar 31, 2025
- Unknownvercel next.js Improper AuthorizationPatch nowKEVEPSS 99.22%Mar 28, 2025
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 65.00%Mar 27, 2025
Sort