Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 97.17%Mar 24, 2025
- Unknownkubernetes ingress-nginx Improper Isolation or CompartmentalizationPatch nowKEVEPSS 99.40%Mar 23, 2025
- UnknownSitecore Experience Platform , Manager, and Commerce Unauthenticated Arbitrary File ReadPatch nowKEVEPSS 46.77%Mar 17, 2025
- High8.6tj-actions/changed-files GitHub Action Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 72.09%Mar 14, 2025
- UnknownApache camel Improper Handling of Case SensitivityPatch nowKEVEPSS 97.06%Mar 11, 2025
- Critical9.8Apache Tomcat Path Equivalence VulnerabilityPatch nowKEVEPSS 99.94%Mar 10, 2025
- High8.6NAKIVO Backup and Replication Absolute Path Traversal VulnerabilityPatch nowKEVEPSS 94.36%Mar 4, 2025
- Critical9.8XWiki Platform Eval Injection VulnerabilityPatch nowKEVEPSS 99.97%Feb 20, 2025
- High7.3Yeti Server Side Template Injection VulnerabilityPatch nowKEVEPSS 3.92%Feb 18, 2025
- High8.8Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityPatch nowKEVEPSS 98.14%Feb 12, 2025
- Unknowniptanus wordpress_file_upload Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 93.34%Feb 11, 2025
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 33.16%Feb 11, 2025
- Unknownvercel next.js Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 59.18%Feb 11, 2025
- Critical9.9Wazuh Server Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 93.84%Feb 10, 2025
- High7.5SimpleHelp Path Traversal VulnerabilityPatch nowKEVEPSS 96.83%Jan 15, 2025
- High7.5Ivanti Endpoint Manager (EPM) Absolute Path Traversal VulnerabilityPatch nowKEVEPSS 89.81%Jan 14, 2025
- High7.5Ivanti Endpoint Manager (EPM) Absolute Path Traversal VulnerabilityPatch nowKEVEPSS 90.98%Jan 14, 2025
- High7.5Ivanti Endpoint Manager (EPM) Absolute Path Traversal VulnerabilityPatch nowKEVEPSS 99.99%Jan 14, 2025
- Critical9.8Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityPatch nowKEVEPSS 94.35%Jan 14, 2025
- Critical9.8SonicWall SonicOS SSLVPN Improper Authentication VulnerabilityPatch nowKEVEPSS 95.31%Jan 9, 2025
- Critical9.0Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.98%Jan 8, 2025
- UnknownGFI KerioControl HTTP Response Splitting VulnerabilityPatch nowKEVEPSS 29.34%Jan 8, 2025
- Critical9.8Aviatrix Controllers OS Command Injection VulnerabilityPatch nowKEVEPSS 98.52%Jan 7, 2025
- UnknownMicrosoft SharePoint Deserialization of Untrusted DataPatch nowKEVEPSS 45.22%Jan 6, 2025
- UnknownMicrosoft SharePoint Deserialization of Untrusted DataPatch nowKEVEPSS 52.90%Jan 6, 2025
Sort