Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 4.53%Aug 1, 2025
- Unknownlylme lylme_spage Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.44%Aug 1, 2025
- UnknownMicrosoft Windows Untrusted Pointer DereferencePatch nowKEVEPSS 1.98%Aug 1, 2025
- Unknownakamai cloudtest Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 2.14%Jul 31, 2025
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.09%Jul 31, 2025
- UnknownYonyou ufida_erp-nc Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.84%Jul 31, 2025
- Unknownsantesoft sante_pacs_server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 35.38%Jul 31, 2025
- UnknownOSGeo GeoServer Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 2.30%Jul 31, 2025
- Unknownidccms idccms Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.91%Jul 31, 2025
- UnknownCitrix application_delivery_controller_firmware Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 10.83%Jul 31, 2025
- UnknownPalo Alto Networks PAN-OS Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 7.15%Jul 31, 2025
- Critical10.0Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.10%Jul 31, 2025
- UnknownCisco unified_ip_interactive_voice_response Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 25.75%Jul 31, 2025
- UnknownAdobe experience_manager Deserialization of Untrusted DataPatch nowKEVEPSS 51.68%Jul 30, 2025
- UnknownApple iOS/macOS/tvOS/watchOS 'libxpc' VulnerabilityPatch nowKEVEPSS 13.48%Jul 30, 2025
- Critical9.8SonicWall SonicOS Use of Externally-Controlled Format StringPatch nowKEVEPSS 0.94%Jul 29, 2025
- High8.8Apple Multiple Products Buffer Overflow VulnerabilityPatch nowKEVEPSS 1.66%Jul 29, 2025
- UnknownSolarWinds webhelpdesk Use of Hard-coded CredentialsPatch nowKEVEPSS 0.32%Jul 29, 2025
- Medium5.3chancms chancms Improper Input ValidationPatch nowKEVEPSS 1.09%Jul 28, 2025
- Unknownbricksbuilder bricks Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.48%Jul 28, 2025
- High8.4RARLAB WinRAR Improper Input ValidationPatch nowKEVEPSS 1.85%Jul 25, 2025
- Critical9.3XWiki xwiki Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 87.90%Jul 24, 2025
- Critical9.8iqonic wpbookit Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.52%Jul 24, 2025
- High8.8WPExperts post_smtp Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.60%Jul 24, 2025
- Critical9.3oscommerce online_merchant Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 4.56%Jul 23, 2025
Sort