Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Cisco Catalyst SD-WAN Manager Directory or Path Traversal VulnerabilityPatch nowKEVEPSS 28.17%Jun 15, 2026
- High8.8Jenkins Jenkins Deserialization of Untrusted DataPatch nowKEVEPSS 2.16%Jun 10, 2026
- Critical9.8Fortinet FortiSandbox OS Command Injection VulnerabilityPatch nowKEVEPSS 76.11%Jun 9, 2026
- High7.5SolarWinds Serv-U Uncontrolled Resource Consumption VulnerabilityPatch nowKEVEPSS 43.65%Jun 4, 2026
- High8.6Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 88.20%Jun 3, 2026
- High8.1DD-WRT Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 4.00%Jun 3, 2026
- Critical9.8Improper Privilege ManagementPatch nowKEVEPSS 0.77%Jun 2, 2026
- High8.8brainstormforce spectra Improper Privilege ManagementPatch nowKEVEPSS 0.97%May 30, 2026
- Medium6.5The Independent Analytics plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.14.9.Patch nowKEVEPSS 0.44%May 28, 2026
- High8.6Dozzle is a realtime log viewer for docker containers.Patch nowKEVEPSS 1.60%May 26, 2026
- Medium6.5Kludex Starlette HTTP Request/Response Smuggling VulnerabilityPatch nowKEVEPSS 7.06%May 26, 2026
- Unknownxiongmaitech uc-httpd Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 28.27%May 22, 2026
- Critical10.0CtrlPanel is open-source billing software for hosting providers.Patch nowKEVEPSS 4.54%May 19, 2026
- Critical9.3dify dify Relative Path TraversalPatch nowKEVEPSS 1.89%May 18, 2026
- Critical9.4Gotenberg is a Docker-powered stateless API for PDF files.Patch nowKEVEPSS 1.77%May 14, 2026
- Critical9.8Gotenberg is a Docker-powered stateless API for PDF files.Patch nowKEVEPSS 3.67%May 14, 2026
- Critical9.8The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to Authentication Bypass in versions 3.4.0 to 3.4.1.1.Patch nowKEVEPSS 3.01%May 14, 2026
- Critical10.0Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityPatch nowKEVEPSS 91.82%May 14, 2026
- Medium5.3Nitro is a next generation server toolkit.Patch nowKEVEPSS 0.57%May 13, 2026
- Critical9.2NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.Patch nowKEVEPSS 3.40%May 13, 2026
- Critical9.3Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and GUARDIANWALL Mail Security Cloud (SaaS version).Patch nowKEVEPSS 0.73%May 13, 2026
- High7.5lfprojects mlflow Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.21%May 11, 2026
- Critical9.6TanStack Unspecified VulnerabilityPatch nowKEVEPSS 1.05%May 11, 2026
- High8.8Grav is a file-based Web platform.Patch nowKEVEPSS 0.52%May 11, 2026
- High8.7BerriAI LiteLLM Command Injection VulnerabilityPatch nowKEVEPSS 92.57%May 7, 2026
Sort