Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.56%Jun 20, 2025
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.79%Jun 20, 2025
- UnknownImproper Input ValidationPatch nowKEVEPSS 0.60%Jun 20, 2025
- Critical9.3minidvblinux minidvblinux Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 5.55%Jun 20, 2025
- Unknownaviatrix controller Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.57%Jun 20, 2025
- Critical9.3SugarCRM sugarcrm Deserialization of Untrusted DataPatch nowKEVEPSS 4.96%Jun 20, 2025
- High7.0GNU grub2 Execution with Unnecessary PrivilegesPatch nowKEVEPSS 0.47%Jun 19, 2025
- Unknownpterodactyl panel Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 54.46%Jun 19, 2025
- UnknownFunnelKit funnelkit_automations Missing AuthorizationPatch nowKEVEPSS 3.35%Jun 18, 2025
- Unknownwisecleaner wise_force_deleter Improper Access ControlPatch nowKEVEPSS 0.51%Jun 18, 2025
- UnknownZemana Watchdog Anti-Malware amsdk.sys Kernel Mode Driver Arbitrary Code InjectionPatch nowKEVEPSS 0.56%Jun 18, 2025
- High8.8Sitecore experience_commerce Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 29.81%Jun 17, 2025
- High8.8Sitecore experience_commerce Relative Path TraversalPatch nowKEVEPSS 24.30%Jun 17, 2025
- High7.5Sitecore experience_commerce Use of Hard-coded CredentialsPatch nowKEVEPSS 55.87%Jun 17, 2025
- Critical9.3Citrix NetScaler ADC and Gateway Out-of-Bounds Read VulnerabilityPatch nowKEVEPSS 99.97%Jun 17, 2025
- High8.1CodeDropz drag_and_drop_multiple_file_upload_-_contact_form_7 Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 6.03%Jun 17, 2025
- UnknownQualcomm ar8035_firmware Improper Validation of Array IndexPatch nowKEVEPSS 0.58%Jun 17, 2025
- UnknownD-Link di-7200gv2_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 4.38%Jun 17, 2025
- UnknownCisco wvc54gca Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 29.82%Jun 16, 2025
- Medium4.2Apple Multiple Products Unspecified VulnerabilityPatch nowKEVEPSS 1.19%Jun 11, 2025
- UnknownZoho firewall_analyzer Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 99.29%Jun 11, 2025
- Medium5.6Missing AuthorizationPatch nowKEVEPSS 23.00%Jun 10, 2025
- High7.8Microsoft Office Path Traversal: '.../...//'Patch nowKEVEPSS 0.75%Jun 10, 2025
- High7.8Microsoft Office Use After FreePatch nowKEVEPSS 0.65%Jun 10, 2025
- High7.8Microsoft Office Use After FreePatch nowKEVEPSS 2.19%Jun 10, 2025