Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8meowapps ai_engine Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 74.66%Nov 5, 2025
- UnknownMoodle moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.13%Nov 5, 2025
- UnknownAtlassian Confluence Server and Data Center Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 41.22%Nov 5, 2025
- Unknownthinkcmf thinkcmf Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 7.42%Nov 5, 2025
- Critical9.8React Native Community CLI OS Command Injection VulnerabilityPatch nowKEVEPSS 93.98%Nov 3, 2025
- Critical9.8WPExperts post_smtp Missing AuthorizationPatch nowKEVEPSS 61.48%Nov 1, 2025
- High8.6Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.95%Oct 31, 2025
- Critical9.8Improper Privilege ManagementPatch nowKEVEPSS 9.61%Oct 31, 2025
- Critical9.8nootheme jobmonster Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.80%Oct 31, 2025
- UnknownApache Solr Improper AuthenticationPatch nowKEVEPSS 92.75%Oct 31, 2025
- UnknownJEECG jeecg Incorrect Permission Assignment for Critical ResourcePatch nowKEVEPSS 3.52%Oct 31, 2025
- Critical9.3kubernetes operations Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.40%Oct 30, 2025
- Critical9.3seeyon zhiyuan_oa_web_application_system Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.49%Oct 30, 2025
- UnknownLinksys re6500_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.69%Oct 30, 2025
- Medium6.1LiteSpeed Technologies LiteSpeed Cache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.38%Oct 29, 2025
- Medium6.5anti-malware_security_and_brute-force_firewall_project anti-malware_security_and_brute-force_firewall Missing AuthorizationPatch nowKEVEPSS 0.46%Oct 29, 2025
- UnknownTOTOLINK a3002ru Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.90%Oct 29, 2025
- Critical9.3D-Link dns-343_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 9.81%Oct 29, 2025
- Medium5.5Uncontrolled Resource ConsumptionPatch nowKEVEPSS 0.28%Oct 28, 2025
- UnknownAdobe experience_manager XML Injection (aka Blind XPath Injection)Patch nowKEVEPSS 1.71%Oct 28, 2025
- UnknownZoho ManageEngine OpManager Smart Update Manager Servlet Remote Code ExecutionPatch nowKEVEPSS 78.70%Oct 28, 2025
- Unknownhancom hancom_office_2020 Buffer Underwrite ('Buffer Underflow')Patch nowKEVEPSS 0.53%Oct 27, 2025
- Unknownhancom anysign4pc Path Traversal: '../filedir'Patch nowKEVEPSS 1.30%Oct 27, 2025
- UnknownListingPro - WordPress Directory & Listing '~/listingpro-plugin/functions.php' VulnerabilityPatch nowKEVEPSS 1.61%Oct 27, 2025
- Critical9.8Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 33.34%Oct 24, 2025
Sort