Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownTOTOLINK a3002ru Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.99%Dec 15, 2025
- Critical9.8wpdirectorykit wp_directory_kit Incorrect Implementation of Authentication AlgorithmPatch nowKEVEPSS 4.55%Dec 3, 2025
- Critical9.8dynamiapps frontend_admin Missing AuthorizationPatch nowKEVEPSS 2.19%Dec 3, 2025
- Critical9.8acfextended advanced_custom_fields_extended Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 67.62%Dec 2, 2025
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 76.14%Nov 25, 2025
- UnknownTVT nvms-9000_firmware Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.86%Nov 24, 2025
- Unknownsecurenvoy multi-factor_authentication_solutions Cleartext Transmission of Sensitive InformationPatch nowKEVEPSS 3.30%Nov 12, 2025
- Unknowncontrolid idsecure Improper AuthenticationPatch nowKEVEPSS 65.00%Nov 10, 2025
- UnknownImproper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 1.54%Nov 7, 2025
- High8.6Sangoma FreePBX OS Command Injection VulnerabilityPatch nowKEVEPSS 84.62%Nov 6, 2025
- Critical9.8meowapps ai_engine Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 74.66%Nov 5, 2025
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 9.61%Oct 31, 2025
- Critical9.8nootheme jobmonster Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.80%Oct 31, 2025
- UnknownJEECG jeecg Incorrect Permission Assignment for Critical ResourcePatch nowKEVEPSS 3.52%Oct 31, 2025
- Critical9.3kubernetes operations Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.40%Oct 30, 2025
- Unknownrapid7 velociraptor Incorrect Default PermissionsPatch nowKEVEPSS 1.03%Oct 22, 2025
- Critical9.8Oracle marketing Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.60%Oct 21, 2025
- Critical9.8Oracle marketing Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.65%Oct 21, 2025
- Medium6.5thimpress learnpress Missing AuthorizationPatch nowKEVEPSS 0.46%Oct 18, 2025
- UnknownFortra filecatalyst_workflow Improper Input ValidationPatch nowKEVEPSS 90.07%Oct 17, 2025
- UnknownCisco smart_software_manager_on-prem Unverified Password ChangePatch nowKEVEPSS 80.64%Oct 17, 2025
- UnknownZyxel usg40_firmware Improper AuthenticationPatch nowKEVEPSS 95.13%Oct 17, 2025
- Medium6.5Fortinet FortiOS Insufficient Session ExpirationPatch nowKEVEPSS 0.34%Oct 14, 2025
- UnknownFour-Faith f3x36_firmware Active Debug CodePatch nowKEVEPSS 3.04%Oct 13, 2025
- Critical9.8Improper Privilege ManagementPatch nowKEVEPSS 0.62%Oct 11, 2025
Sort