Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownExposed IOCTL with Insufficient Access ControlPatch nowKEVEPSS 8.01%Aug 5, 2025
- Critical9.1Dassault Systèmes DELMIA Apriso Missing Authorization VulnerabilityPatch nowKEVEPSS 73.75%Aug 4, 2025
- High8.0Dassault Systèmes DELMIA Apriso Code Injection VulnerabilityPatch nowKEVEPSS 79.34%Aug 4, 2025
- UnknownMicrosoft Windows Improper Input ValidationPatch nowKEVEPSS 5.97%Aug 4, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 34.59%Aug 2, 2025
- Critical9.8Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 4.51%Aug 1, 2025
- Unknownlylme lylme_spage Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.44%Aug 1, 2025
- UnknownMicrosoft Windows Untrusted Pointer DereferencePatch nowKEVEPSS 1.98%Aug 1, 2025
- Unknownakamai cloudtest Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 2.14%Jul 31, 2025
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.06%Jul 31, 2025
- UnknownYonyou ufida_erp-nc Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.84%Jul 31, 2025
- Unknownsantesoft sante_pacs_server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 35.38%Jul 31, 2025
- UnknownOSGeo GeoServer Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 2.30%Jul 31, 2025
- Unknownidccms idccms Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.91%Jul 31, 2025
- UnknownCitrix application_delivery_controller_firmware Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 10.83%Jul 31, 2025
- UnknownPalo Alto Networks PAN-OS Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 7.15%Jul 31, 2025
- Critical10.0Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.04%Jul 31, 2025
- UnknownCisco unified_ip_interactive_voice_response Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 25.75%Jul 31, 2025
- UnknownAdobe experience_manager Deserialization of Untrusted DataPatch nowKEVEPSS 51.68%Jul 30, 2025
- UnknownApple iOS/macOS/tvOS/watchOS 'libxpc' VulnerabilityPatch nowKEVEPSS 13.48%Jul 30, 2025
- High8.8Apple Multiple Products Buffer Overflow VulnerabilityPatch nowKEVEPSS 1.60%Jul 29, 2025
- UnknownSolarWinds webhelpdesk Use of Hard-coded CredentialsPatch nowKEVEPSS 0.30%Jul 29, 2025
- Unknownbricksbuilder bricks Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.45%Jul 28, 2025
- High8.4RARLAB WinRAR Improper Input ValidationPatch nowKEVEPSS 1.85%Jul 25, 2025
- Critical9.8iqonic wpbookit Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.52%Jul 24, 2025