Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownparseplatform parse-server Exposure of Sensitive System Information to an Unauthorized Control SpherePatch nowKEVEPSS 0.96%Dec 1, 2025
- Medium5.5Android Framework Information Disclosure VulnerabilityPatch nowKEVEPSS 0.26%Dec 1, 2025
- High7.8Android Framework Privilege Escalation VulnerabilityPatch nowKEVEPSS 0.26%Dec 1, 2025
- Unknownvfbpro visual_form_builder Improper Neutralization of Formula Elements in a CSV FilePatch nowKEVEPSS 2.87%Dec 1, 2025
- Unknownplenti plenti Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 2.71%Nov 29, 2025
- UnknownWSO2 api_control_plane Authentication Bypass by SpoofingPatch nowKEVEPSS 0.85%Nov 28, 2025
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.31%Nov 28, 2025
- Unknownservmask all-in-one_wp_migration Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.20%Nov 28, 2025
- Unknownfifu featured_image_from_url Insertion of Sensitive Information into Log FilePatch nowKEVEPSS 12.31%Nov 27, 2025
- UnknownFlowiseAI Flowise Missing Authentication for Critical FunctionPatch nowKEVEPSS 75.20%Nov 27, 2025
- Unknowndnnsoftware DotNetNuke (DNN) Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 46.97%Nov 27, 2025
- Unknownfabian school_fees_payment_system Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 2.00%Nov 27, 2025
- UnknownQwizcards Reflected Cross-Site Scripting (XSS)Patch nowKEVEPSS 0.49%Nov 27, 2025
- UnknownXWiki xwiki Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.37%Nov 27, 2025
- Unknownmaptiler tileserver_php Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.42%Nov 27, 2025
- Unknownmaptiler tileserver_php Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.51%Nov 27, 2025
- Unknownimgproxy imgproxy Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.87%Nov 27, 2025
- Unknownmongoosejs mongoose Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.98%Nov 27, 2025
- Critical9.4Ray-Project Ray Code Injection VulnerabilityPatch nowKEVEPSS 62.46%Nov 26, 2025
- UnknownRelative Path TraversalPatch nowKEVEPSS 1.62%Nov 26, 2025
- Unknownmonstaftp monsta_ftp Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 72.68%Nov 26, 2025
- UnknownTP-Link archer_axe75_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 42.09%Nov 26, 2025
- UnknownD-Link dns-320_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 79.62%Nov 26, 2025
- Unknownfsevents_project fsevents Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.70%Nov 26, 2025
- Unknownpytorch torchserve Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 41.70%Nov 26, 2025