Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownNETGEAR ac2100_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 2.23%Oct 9, 2025
- UnknownTP-Link tl-wr840n_firmware Session FixationPatch nowKEVEPSS 67.06%Oct 9, 2025
- UnknownD-Link dir-868l_firmware Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.84%Oct 9, 2025
- Unknownbillion 5200w-t_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 67.64%Oct 9, 2025
- Unknownbelkin n750_wireless_router_firmware Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 67.49%Oct 9, 2025
- UnknownAMD Radeon Graphics Driver IOCTL Request VulnerabilityPatch nowKEVEPSS 0.46%Oct 8, 2025
- Unknownjoomlaserviceprovider wsecure Improper Input ValidationPatch nowKEVEPSS 8.98%Oct 8, 2025
- UnknownAuthorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 4.51%Oct 7, 2025
- Unknownstirlingpdf stirling_pdf Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 2.00%Oct 7, 2025
- UnknownMicrosoft web_deploy_4.0 Deserialization of Untrusted DataPatch nowKEVEPSS 27.75%Oct 7, 2025
- Critical9.8Fortinet FortiWeb Path Traversal VulnerabilityPatch nowKEVEPSS 91.97%Oct 6, 2025
- UnknownCisco IOS XR Heap-based Buffer OverflowPatch nowKEVEPSS 6.92%Oct 6, 2025
- Critical9.8Oracle E-Business Suite Unspecified VulnerabilityPatch nowKEVEPSS 99.73%Oct 4, 2025
- UnknownAuthentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.56%Oct 2, 2025
- Unknownatutor atutor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.50%Oct 2, 2025
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 34.65%Sep 30, 2025
- High7.8Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions VulnerabilityPatch nowKEVEPSS 8.44%Sep 29, 2025
- Unknowncs-grp neo_impact Improper Verification of Cryptographic SignaturePatch nowKEVEPSS 1.07%Sep 26, 2025
- Unknownusememos memos Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.14%Sep 26, 2025
- Unknownusememos memos Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.05%Sep 26, 2025
- High8.6Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization VulnerabilityPatch nowKEVEPSS 87.09%Sep 25, 2025
- Critical9.9Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow VulnerabilityPatch nowKEVEPSS 71.21%Sep 25, 2025
- UnknownLumis lumis_experience_platform Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.81%Sep 25, 2025
- Unknownusememos memos Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.08%Sep 25, 2025
- UnknownXWiki xwiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 93.48%Sep 25, 2025