Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0N-able N-central Static Code Injection VulnerabilityPatch nowKEVEPSS 13.35%Sep 5, 2026
- Critical9.2MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command VulnerabilityPatch nowKEVEPSS 6.39%Sep 5, 2026
- Medium6.9Mikrotik RouterOS Improper Enforcement of Behavioral Workflow VulnerabilityPatch nowKEVEPSS 1.05%Sep 5, 2026
- High8.8MikroTik RouterOS Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 1.56%Sep 5, 2026
- Critical9.2MikroTik RouterOS Improper Verification of Cryptographic SignaturePatch nowKEVEPSS 6.45%Sep 5, 2026
- High8.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 48.88%Sep 3, 2026
- High7.8SonicWall SMA1000 Appliances OS Command Injection VulnerabilityPatch nowKEVEPSS 9.89%Sep 1, 2026
- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 8.04%Sep 1, 2026
- Critical9.8JFrog Artifactory Improper Authentication VulnerabilityPatch nowKEVEPSS 14.37%Aug 28, 2026
- Critical9.4PaperCut NG/MF Unsafe Reflection VulnerabilityPatch nowKEVEPSS 63.53%Aug 28, 2026
- High8.8PaperCut NG/MF Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 85.58%Aug 28, 2026
- Critical9.8SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026.Patch nowKEVEPSS 4.48%Aug 21, 2026
- Critical9.8GeoTools is an open source Java library that provides tools for geospatial data.Patch nowKEVEPSS 3.98%Aug 21, 2026
- Critical9.3Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 23.16%Aug 19, 2026
- Critical9.8Gitea Code Injection VulnerabilityPatch nowKEVEPSS 23.99%Aug 19, 2026
- Critical9.8incsub forminator Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 6.14%Aug 18, 2026
- High8.1motopress restaurant_menu Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.47%Aug 18, 2026
- Critical10.0wpcompress wp_compress Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.86%Aug 18, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Aug 18, 2026
- Critical9.3MLflow Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 10.02%Aug 17, 2026
- Critical9.1GitLab GitLab Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 60.20%Aug 17, 2026
- High8.9Zimbra Collaboration Suite (ZCS) OS Command Injection VulnerabilityPatch nowKEVEPSS 71.66%Aug 13, 2026
- High7.5JFrog Artifactory Improper Authentication VulnerabilityPatch nowKEVEPSS 9.80%Aug 12, 2026
- Medium5.3JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory VulnerabilityPatch nowKEVEPSS 0.66%Aug 12, 2026
- Critical9.5TrueConf Server Code Injection VulnerabilityPatch nowKEVEPSS 1.69%Aug 12, 2026
Sort