Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownXWiki xwiki Exposure of Private Personal Information to an Unauthorized ActorPatch nowKEVEPSS 1.37%Sep 6, 2025
- Critical9.8Linux Kernel Improper Check for Unusual or Exceptional Conditions VulnerabilityPatch nowKEVEPSS 2.88%Sep 5, 2025
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.71%Sep 4, 2025
- UnknownFortinet FortiWeb Improper Handling of ParametersPatch nowKEVEPSS 10.08%Sep 4, 2025
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.65%Sep 4, 2025
- UnknownXWiki xwiki Transmission of Private Resources into a New Sphere ('Resource Leak')Patch nowKEVEPSS 0.95%Sep 4, 2025
- Critical9.0Sitecore Multiple Products Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 60.60%Sep 3, 2025
- Unknowngl-inet gl-ax1800_firmware Improper AuthenticationPatch nowKEVEPSS 47.80%Sep 3, 2025
- Unknowngl-inet gl-mt1300_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 9.12%Sep 3, 2025
- Unknowncanonical ubuntu_linux Incorrect AuthorizationPatch nowKEVEPSS 9.05%Sep 3, 2025
- UnknownLinux Kernel Incorrect CalculationPatch nowKEVEPSS 3.64%Sep 3, 2025
- UnknownVMware cloud_foundation Deserialization of Untrusted DataPatch nowKEVEPSS 23.31%Sep 3, 2025
- UnknownVMware Workspace ONE Access and Identity Manager Improper AuthenticationPatch nowKEVEPSS 49.53%Sep 3, 2025
- UnknownCisco RV Series Routers Stack-based Buffer OverflowPatch nowKEVEPSS 80.04%Sep 3, 2025
- High8.8Android Runtime Use-After-Free VulnerabilityPatch nowKEVEPSS 0.63%Sep 1, 2025
- Unknowntgsoft vir.it_explorer Improper Input ValidationPatch nowKEVEPSS 1.51%Sep 1, 2025
- Low2.1Telesquare tlr-2005ksh_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 6.25%Aug 29, 2025
- High8.6TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection VulnerabilityPatch nowKEVEPSS 37.73%Aug 29, 2025
- Critical10.0Sangoma FreePBX Authentication Bypass VulnerabilityPatch nowKEVEPSS 86.35%Aug 28, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in ThemeREX Group ThemeREX Addons trx_addons allows Object Injection.This issue affects ThemeREX Addons: from n/a through 2.36.1.1.Patch nowKEVEPSS 0.53%Aug 27, 2025
- UnknownTiagorlampert CHAOS Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.35%Aug 27, 2025
- Critical9.2Citrix NetScaler Memory Overflow VulnerabilityPatch nowKEVEPSS 20.28%Aug 26, 2025
- UnknownJuniper Junos OS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.91%Aug 24, 2025
- UnknownCommvault Commvault Use of Hard-coded PasswordPatch nowKEVEPSS 7.76%Aug 23, 2025
- Unknownmyeventon eventon Missing AuthorizationPatch nowKEVEPSS 37.96%Aug 23, 2025