Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Missing Authentication for Critical FunctionPatch nowKEVEPSS 20.39%May 29, 2026
- High8.1Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via a preg_replace() backslash escape bypass.Patch nowKEVEPSS 1.70%May 25, 2026
- Critical9.8Drupal Core SQL Injection VulnerabilityPatch nowKEVEPSS 89.38%May 20, 2026
- High8.6lfprojects mlflow Authentication Bypass by Primary WeaknessPatch nowKEVEPSS 20.78%May 15, 2026
- Medium6.1Microsoft Exchange Server Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 70.66%May 14, 2026
- Critical9.2NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.Patch nowKEVEPSS 68.05%May 13, 2026
- High7.8Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityPatch nowKEVEPSS 95.01%May 13, 2026
- High7.2Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation VulnerabilityPatch nowKEVEPSS 34.45%May 7, 2026
- Critical9.3Palo Alto Networks PAN-OS Out-of-bounds Write VulnerabilityPatch nowKEVEPSS 41.71%May 5, 2026
- Critical9.3WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 98.53%Apr 28, 2026
- Critical9.3BerriAI LiteLLM SQL Injection VulnerabilityPatch nowKEVEPSS 89.42%Apr 27, 2026
- High7.8Linux Kernel Incorrect Resource Transfer Between Spheres VulnerabilityPatch nowKEVEPSS 98.11%Apr 22, 2026
- High7.5LMDeploy is a toolkit for compressing, deploying, and serving large language models.Patch nowKEVEPSS 45.25%Apr 20, 2026
- Critical9.8Microsoft Internet Key Exchange (IKE) Service Extensions Double Free VulnerabilityPatch nowKEVEPSS 77.05%Apr 14, 2026
- Critical9.8Fortinet FortiSandbox OS Command Injection VulnerabilityPatch nowKEVEPSS 93.19%Apr 14, 2026
- High7.5Apache Tomcat Missing Encryption of Sensitive Data VulnerabilityPatch nowKEVEPSS 98.50%Apr 9, 2026
- High8.8Apache ActiveMQ Improper Input Validation VulnerabilityPatch nowKEVEPSS 98.26%Apr 7, 2026
- High8.6Adobe Acrobat and Reader Prototype Pollution VulnerabilityPatch nowKEVEPSS 7.23%Apr 7, 2026
- High8.7LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.Patch nowKEVEPSS 38.61%Apr 6, 2026
- Critical9.8Fortinet FortiClient EMS Improper Access Control VulnerabilityPatch nowKEVEPSS 93.98%Apr 3, 2026
- High8.8Google Dawn Use-After-Free VulnerabilityPatch nowKEVEPSS 13.74%Mar 31, 2026
- High8.7Langflow is a tool for building and deploying AI-powered agents and workflows.Patch nowKEVEPSS 19.58%Mar 24, 2026
- Critical9.3Langflow Code Injection VulnerabilityPatch nowKEVEPSS 96.18%Mar 19, 2026
- Critical10.0Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 88.66%Mar 4, 2026
- High7.5Ghost is a Node.js content management system.Patch nowKEVEPSS 71.09%Feb 20, 2026
Sort