Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownFour-Faith f3x36_firmware Active Debug CodePatch nowKEVEPSS 3.04%Oct 13, 2025
- Unknownrbaskets request_baskets Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 6.59%Oct 13, 2025
- UnknownApache Struts Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 70.21%Oct 13, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 8.10%Oct 12, 2025
- Unknownfile_away_project file_away Use of a Broken or Risky Cryptographic AlgorithmPatch nowKEVEPSS 1.69%Oct 12, 2025
- High7.5Oracle E-Business Suite Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 95.89%Oct 11, 2025
- Critical9.8Improper Privilege ManagementPatch nowKEVEPSS 0.62%Oct 11, 2025
- UnknownDell unity_operating_environment Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 66.43%Oct 9, 2025
- UnknownEdimax re11s_firmware Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 4.71%Oct 9, 2025
- UnknownTOTOLINK x18_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 12.38%Oct 9, 2025
- High7.5Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties VulnerabilityPatch nowKEVEPSS 92.14%Oct 9, 2025
- UnknownTOTOLINK x6000r_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 14.81%Oct 9, 2025
- UnknownD-Link dir-816_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 8.33%Oct 9, 2025
- UnknownNETGEAR ac2100_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 2.23%Oct 9, 2025
- UnknownTP-Link tl-wr840n_firmware Session FixationPatch nowKEVEPSS 67.06%Oct 9, 2025
- UnknownD-Link dir-868l_firmware Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.82%Oct 9, 2025
- Unknownbillion 5200w-t_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 67.64%Oct 9, 2025
- Unknownbelkin n750_wireless_router_firmware Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 67.49%Oct 9, 2025
- Critical9.8The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 6.6.7 via the mPatch nowKEVEPSS 0.80%Oct 8, 2025
- UnknownAMD Radeon Graphics Driver IOCTL Request VulnerabilityPatch nowKEVEPSS 0.44%Oct 8, 2025
- Unknownjoomlaserviceprovider wsecure Improper Input ValidationPatch nowKEVEPSS 8.98%Oct 8, 2025
- Critical9.8Fortinet FortiWeb Path Traversal VulnerabilityPatch nowKEVEPSS 91.97%Oct 6, 2025
- UnknownCisco IOS XR Heap-based Buffer OverflowPatch nowKEVEPSS 6.92%Oct 6, 2025
- Critical9.8Oracle E-Business Suite Unspecified VulnerabilityPatch nowKEVEPSS 99.73%Oct 4, 2025
- Critical10.0Redis redis Use After FreePatch nowKEVEPSS 82.64%Oct 3, 2025
Sort