Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownays-pro quiz_maker Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 11.76%May 4, 2026
- Critical9.3Synway smg_gateway_management_software Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 5.73%Apr 30, 2026
- Critical9.3Weaver e-office Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.77%Apr 30, 2026
- High8.1ProFTPD ProFTPD Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 7.31%Apr 28, 2026
- Critical10.0Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Apache Camel Camel-Coap component.Patch nowKEVEPSS 7.16%Apr 27, 2026
- Critical9.3ThinkPHP ThinkPHP Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 0.89%Apr 22, 2026
- Critical9.3IBM collaborative_lifecycle_management Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.65%Apr 21, 2026
- High7.5LMDeploy is a toolkit for compressing, deploying, and serving large language models.Patch nowKEVEPSS 1.51%Apr 20, 2026
- Unknownmjdm majordomo Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 5.70%Apr 18, 2026
- Critical9.8Fortinet FortiSandbox Path Traversal: '../filedir'Patch nowKEVEPSS 0.72%Apr 14, 2026
- Critical9.8Fortinet FortiSandbox OS Command Injection VulnerabilityPatch nowKEVEPSS 47.36%Apr 14, 2026
- UnknownNETGEAR dgn2200_firmware Improper AuthenticationPatch nowKEVEPSS 2.11%Apr 12, 2026
- Medium6.5Arcane is an interface for managing Docker containers, images, networks, and volumes.Patch nowKEVEPSS 0.72%Apr 10, 2026
- High8.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.27%Apr 9, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.38%Apr 8, 2026
- Medium6.3Vite is a frontend tooling framework for JavaScript.Patch nowKEVEPSS 0.98%Apr 7, 2026
- Critical9.8Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization.Patch nowKEVEPSS 9.22%Apr 7, 2026
- Critical9.3Weaver e-cology Missing Authentication for Critical FunctionPatch nowKEVEPSS 20.36%Apr 7, 2026
- Unknowntinyproxy_project tinyproxy Use After FreePatch nowKEVEPSS 63.08%Apr 6, 2026
- Unknownfit2cloud 1panel Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.97%Apr 6, 2026
- Critical9.8Fortinet FortiClient EMS Improper Access Control VulnerabilityPatch nowKEVEPSS 93.98%Apr 3, 2026
- Critical9.3metinfo metinfo Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 4.50%Apr 1, 2026
- UnknownInsertion of Sensitive Information into Log FilePatch nowKEVEPSS 1.92%Apr 1, 2026
- UnknownZoho ManageEngine ADSelfService Plus Username EnumerationPatch nowKEVEPSS 10.03%Apr 1, 2026
- Unknownrocketsoftware trufusion_enterprise Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.28%Mar 31, 2026
Sort