Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0Fortra GoAnywhere MFT Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.80%Sep 18, 2025
- Critical9.3WatchGuard Firebox Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 91.80%Sep 17, 2025
- Critical9.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 6.06%Sep 17, 2025
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.45%Sep 17, 2025
- Critical10.0Spring Cloud Gateway Server Webflux may be vulnerable to Spring Environment property modification.Patch nowKEVEPSS 3.55%Sep 16, 2025
- Unknownarticatech artica_proxy Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.68%Sep 16, 2025
- Unknownb-link bl-wr9000_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 10.80%Sep 15, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 86.84%Sep 15, 2025
- UnknownRealtek rtl819x_jungle_software_development_kit Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.19%Sep 15, 2025
- High7.1Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.48%Sep 14, 2025
- Unknownsigb pmb Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.17%Sep 14, 2025
- Unknownarkextensions jck_editor Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 82.98%Sep 14, 2025
- High7.5StellarWP the_events_calendar Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.35%Sep 12, 2025
- Critical9.8Samsung Mobile Devices Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 35.58%Sep 12, 2025
- Critical9.8Samsung Mobile Devices Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 2.22%Sep 12, 2025
- Unknownw3eden download_manager Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.88%Sep 11, 2025
- Unknown10web photo_gallery Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 74.61%Sep 11, 2025
- Unknownsmartdatasoft smartblog Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 74.49%Sep 11, 2025
- Unknownopsview opsview Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 16.11%Sep 11, 2025
- Medium5.3chancms chancms Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.72%Sep 10, 2025
- Critical9.8hoverfly hoverfly Improper Input ValidationPatch nowKEVEPSS 10.54%Sep 10, 2025
- Medium6.9lmsys sglang Improper Input ValidationPatch nowKEVEPSS 0.41%Sep 9, 2025
- Critical9.1Adobe Commerce and Magento Improper Input Validation VulnerabilityPatch nowKEVEPSS 94.66%Sep 9, 2025
- Medium5.5jinher jinher_oa Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 1.85%Sep 8, 2025
- Critical9.9FOG is a free open-source cloning/imaging/rescue suite/inventory management system.Patch nowKEVEPSS 20.89%Sep 6, 2025
Sort