Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.6Microsoft Windows User Interface (UI) Misrepresentation of Critical InformationPatch nowKEVEPSS 73.03%Aug 26, 2025
- Critical9.2Citrix NetScaler Memory Overflow VulnerabilityPatch nowKEVEPSS 20.28%Aug 26, 2025
- Critical9.8Missing Authentication for Critical FunctionPatch nowKEVEPSS 32.87%Aug 25, 2025
- UnknownJuniper Junos OS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.91%Aug 24, 2025
- Unknownmyeventon eventon Missing AuthorizationPatch nowKEVEPSS 37.96%Aug 23, 2025
- Unknownhongdian h8922 Direct Request ('Forced Browsing')Patch nowKEVEPSS 2.79%Aug 23, 2025
- Critical9.8Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.74%Aug 22, 2025
- UnknownDrayTek vigor2960_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 0.67%Aug 22, 2025
- UnknownDrayTek vigor3900_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.33%Aug 22, 2025
- UnknownDrayTek vigor3900_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.14%Aug 22, 2025
- UnknownDrayTek vigor3900_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.03%Aug 22, 2025
- UnknownDrayTek vigor3900_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.14%Aug 22, 2025
- UnknownDrayTek vigor3900_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.33%Aug 22, 2025
- UnknownDrayTek vigor3900_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.14%Aug 22, 2025
- UnknownDrayTek vigor300b_firmware Out-of-bounds WritePatch nowKEVEPSS 5.54%Aug 22, 2025
- Low3.5agent-zero agent-zero Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.12%Aug 21, 2025
- UnknownNews & Blog Designer Pack Plugin 'bdp_get_more_post' Function VulnerabilityPatch nowKEVEPSS 4.26%Aug 21, 2025
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.51%Aug 20, 2025
- Medium6.9Commvault Commvault Use of Hard-coded PasswordPatch nowKEVEPSS 7.76%Aug 20, 2025
- Medium5.4Meta Platforms WhatsApp Incorrect Authorization VulnerabilityPatch nowKEVEPSS 4.73%Aug 20, 2025
- Critical10.0Apple iOS, iPadOS, and macOS Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 32.03%Aug 20, 2025
- UnknownWHMpress whmcs Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 3.29%Aug 20, 2025
- Unknownlangchain langchain Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 47.63%Aug 20, 2025
- UnknownLangChain Experimental '__import__' Arbitrary Code Execution VulnerabilityPatch nowKEVEPSS 1.04%Aug 20, 2025
- UnknownWindows Common Log File System Driver Elevation of Privilege VulnerabilityPatch nowKEVEPSS 23.82%Aug 20, 2025
Sort