Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9astro astro Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.64%Aug 19, 2025
- UnknownArcserve udp Incorrect AuthorizationPatch nowKEVEPSS 39.77%Aug 19, 2025
- UnknownZyxel nbg2105_firmware Improper AuthenticationPatch nowKEVEPSS 20.51%Aug 19, 2025
- UnknownD-Link dir-600m_firmware Missing Authentication for Critical FunctionPatch nowKEVEPSS 67.09%Aug 19, 2025
- Unknowntitool printmonitor Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 11.29%Aug 19, 2025
- Unknowngurock testrail Direct Request ('Forced Browsing')Patch nowKEVEPSS 47.49%Aug 18, 2025
- Medium5.3Tenda ac20_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 16.65%Aug 17, 2025
- Unknownfujitsu ip-he950e_firmware Use of Hard-coded CredentialsPatch nowKEVEPSS 3.72%Aug 17, 2025
- Unknownossrs simple_realtime_server Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 8.69%Aug 17, 2025
- UnknownExtensive VC Addons for WPBakery Php Extract Function Unauthenticated RCEPatch nowKEVEPSS 55.46%Aug 17, 2025
- UnknownQNAP music_station Improper AuthenticationPatch nowKEVEPSS 1.24%Aug 16, 2025
- Critical9.8Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 49.89%Aug 15, 2025
- Critical9.0CWP Control Web Panel OS Command Injection VulnerabilityPatch nowKEVEPSS 99.66%Aug 15, 2025
- Critical9.8FlowiseAI Flowise Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 22.37%Aug 14, 2025
- Unknownthememove unicamp Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.49%Aug 14, 2025
- UnknownHPE Smart Update Manager (SUM) Remote Unauthorized Access VulnerabilityPatch nowKEVEPSS 80.86%Aug 14, 2025
- Critical9.4N-able N-Central Command Injection VulnerabilityPatch nowKEVEPSS 3.45%Aug 13, 2025
- Critical9.4N-able N-Central Insecure Deserialization VulnerabilityPatch nowKEVEPSS 1.90%Aug 13, 2025
- Critical9.8LatePoint WordPress Plugin Layout Parameter VulnerabilityPatch nowKEVEPSS 0.57%Aug 13, 2025
- High8.8Microsoft web_deploy_4.0 Deserialization of Untrusted DataPatch nowKEVEPSS 27.75%Aug 12, 2025
- Critical9.9Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.65%Aug 12, 2025
- UnknownAdobe experience_manager_forms Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 77.46%Aug 12, 2025
- Unknownwss protop Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 4.43%Aug 12, 2025
- Critical9.8Fortinet FortiSIEM Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 65.30%Aug 12, 2025
- UnknownApache Superset Improper Input ValidationPatch nowKEVEPSS 86.03%Aug 12, 2025
Sort