Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.2Laravel Livewire Code Injection VulnerabilityPatch nowKEVEPSS 97.32%Jul 17, 2025
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.35%Jul 17, 2025
- Unknownerudika scoold Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 1.03%Jul 17, 2025
- Critical9.3netis-systems netcore_router_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 20.77%Jul 16, 2025
- Critical10.0Cisco Identity Services Engine Injection VulnerabilityPatch nowKEVEPSS 68.00%Jul 16, 2025
- UnknownZyxel emg3525-t50b_firmware Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 0.65%Jul 16, 2025
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.32%Jul 16, 2025
- Unknownwp01ru wp01 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.83%Jul 16, 2025
- UnknownCisco Identity Services Engine Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.74%Jul 16, 2025
- Critical9.8HasThemes download_contact_form_7_widget_for_elementor_page_builder_\&_gutenberg_blocks Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.75%Jul 15, 2025
- Critical9.8Missing AuthorizationPatch nowKEVEPSS 51.29%Jul 15, 2025
- High8.8Google Chromium ANGLE and GPU Improper Input Validation VulnerabilityPatch nowKEVEPSS 10.93%Jul 15, 2025
- Critical9.3Missing Authentication for Critical FunctionPatch nowKEVEPSS 1.01%Jul 14, 2025
- UnknownRed Hat JBoss Application Server Improper AuthenticationPatch nowKEVEPSS 2.94%Jul 14, 2025
- UnknownLiferay digital_experience_platform Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.43%Jul 13, 2025
- UnknownTOTOLINK t10_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.32%Jul 13, 2025
- UnknownTOTOLINK n200re_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.83%Jul 13, 2025
- UnknownTOTOLINK lr1200gb_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 4.91%Jul 13, 2025
- Unknownniceforyou linear_emerge_e3_access_control_firmware Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.43%Jul 13, 2025
- UnknownTOTOLINK n600r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.54%Jul 13, 2025
- UnknownTOTOLINK n600r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.85%Jul 13, 2025
- Unknownhorizontcms_project horizontcms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 18.46%Jul 13, 2025
- Medium5.9webnus modern_events_calendar_lite Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.40%Jul 12, 2025
- Critical9.8simplefilelist simple_file_list Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 43.52%Jul 12, 2025
- Medium6.4fooplugins foogallery Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Jul 11, 2025