Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.56%Oct 2, 2025
- Unknownatutor atutor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.50%Oct 2, 2025
- Medium5.3dify dify Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.70%Sep 30, 2025
- High7.3liquidfiles liquidfiles Authentication Bypass by Primary WeaknessPatch nowKEVEPSS 0.77%Sep 30, 2025
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 33.16%Sep 30, 2025
- Critical9.8chef automate Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 25.95%Sep 29, 2025
- High7.8Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions VulnerabilityPatch nowKEVEPSS 8.63%Sep 29, 2025
- Medium5.3fifu featured_image_from_url Insertion of Sensitive Information into Log FilePatch nowKEVEPSS 12.31%Sep 26, 2025
- Unknowncs-grp neo_impact Improper Verification of Cryptographic SignaturePatch nowKEVEPSS 1.08%Sep 26, 2025
- Unknownusememos memos Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.14%Sep 26, 2025
- Unknownusememos memos Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.05%Sep 26, 2025
- High8.6Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization VulnerabilityPatch nowKEVEPSS 87.09%Sep 25, 2025
- Critical9.9Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow VulnerabilityPatch nowKEVEPSS 71.21%Sep 25, 2025
- UnknownLumis lumis_experience_platform Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.81%Sep 25, 2025
- Unknownusememos memos Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.08%Sep 25, 2025
- UnknownXWiki xwiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 93.48%Sep 25, 2025
- UnknownHewlett Packard Enterprise OfficeConnect Remote Authentication Bypass VulnerabilityPatch nowKEVEPSS 2.81%Sep 25, 2025
- High7.3TOTOLINK x6000r_firmware Improper Input ValidationPatch nowKEVEPSS 0.85%Sep 24, 2025
- High7.7Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution VulnerabilityPatch nowKEVEPSS 41.50%Sep 24, 2025
- High7.1Gutenify Plugin Cross Site Scripting (XSS)Patch nowKEVEPSS 0.23%Sep 23, 2025
- Unknownb-link bl-wr9000_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 6.86%Sep 23, 2025
- Critical9.8SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 90.12%Sep 22, 2025
- Critical10.0FlowiseAI Flowise Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 86.22%Sep 22, 2025
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.74%Sep 22, 2025
- Medium6.1Libraesva Email Security Gateway Command Injection VulnerabilityPatch nowKEVEPSS 1.86%Sep 19, 2025
Sort