Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3TrueConf Server Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 1.46%Aug 12, 2026
- High8.1Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)Patch nowKEVEPSS 0.96%Aug 11, 2026
- Critical9.1Adobe Commerce and Magento Incorrect Authorization VulnerabilityPatch nowKEVEPSS 87.51%Aug 11, 2026
- High8.8Microsoft SharePoint Code Injection VulnerabilityPatch nowKEVEPSS 2.10%Aug 11, 2026
- High7.0Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityPatch nowKEVEPSS 0.33%Aug 11, 2026
- High8.6Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection VulnerabilityPatch nowKEVEPSS 1.01%Aug 11, 2026
- Critical9.8Apple macOS Improper Authentication VulnerabilityPatch nowKEVEPSS 1.72%Aug 6, 2026
- Critical10.0WSO2 Multiple Products Path Traversal VulnerabilityPatch nowKEVEPSS 0.59%Aug 6, 2026
- Critical10.0Metabase SQL Injection VulnerabilityPatch nowKEVEPSS 97.44%Aug 6, 2026
- Critical9.2FlowiseAI Flowise Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.60%Aug 4, 2026
- High8.2N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 14.62%Aug 2, 2026
- High8.2N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 7.88%Aug 1, 2026
- Critical9.8Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)Patch nowKEVEPSS 0.61%Jul 30, 2026
- Critical9.8Broadcom VMware vCenter Path Traversal VulnerabilityPatch nowKEVEPSS 2.56%Jul 30, 2026
- Medium5.3Cisco Secure Firewall Management Center Use of Hard-coded Password VulnerabilityPatch nowKEVEPSS 35.10%Jul 29, 2026
- Critical9.3vBulletin vBulletin Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 5.61%Jul 27, 2026
- High8.8JFrog Artifactory Incorrect Authorization VulnerabilityPatch nowKEVEPSS 8.64%Jul 27, 2026
- Critical9.8JetBrains TeamCity Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 89.57%Jul 27, 2026
- Critical10.0Arista VeloCloud Orchestrator On-Prem OS Command Injection VulnerabilityPatch nowKEVEPSS 1.00%Jul 27, 2026
- High7.8traefik traefik Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.62%Jul 22, 2026
- Critical9.3Check Point SmartConsole Improper Authentication VulnerabilityPatch nowKEVEPSS 77.97%Jul 19, 2026
- Critical9.8IBM Langflow Code Injection VulnerabilityPatch nowKEVEPSS 28.66%Jul 17, 2026
- Critical9.3Sangoma Switchvox SQL Injection VulnerabilityPatch nowKEVEPSS 18.98%Jul 17, 2026
- Critical9.8WordPress Core Interpretation Conflict VulnerabilityPatch nowKEVEPSS 10.65%Jul 17, 2026
- Medium5.9WordPress Core SQL Injection VulnerabilityPatch nowKEVEPSS 5.32%Jul 17, 2026
Sort