Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Microsoft Windows SMB Client Improper Access Control VulnerabilityPatch nowKEVEPSS 82.70%Jun 10, 2025
- High7.5Apache kafka Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 68.78%Jun 10, 2025
- High8.8Microsoft Windows External Control of File Name or Path VulnerabilityPatch nowKEVEPSS 87.02%Jun 10, 2025
- UnknownCisco ios_xe Use of Hard-coded CredentialsPatch nowKEVEPSS 27.49%Jun 10, 2025
- UnknownMicrosoft Windows Use After FreePatch nowKEVEPSS 16.26%Jun 10, 2025
- Unknowncodepress visitor_statistics Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.23%Jun 10, 2025
- Unknownwindriver vxworks Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Patch nowKEVEPSS 3.16%Jun 10, 2025
- Unknownwindriver vxworks Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 75.08%Jun 10, 2025
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.40%Jun 9, 2025
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 31.21%Jun 9, 2025
- Unknownkanev cab_fare_calculator Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 15.06%Jun 9, 2025
- Unknowncircontrol circarlife_scada Improper AuthenticationPatch nowKEVEPSS 24.57%Jun 9, 2025
- UnknownUse of Default PasswordPatch nowKEVEPSS 2.40%Jun 8, 2025
- Unknownarc53 docsgpt Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 17.09%Jun 8, 2025
- UnknownLaravel Laravel Framework Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')Patch nowKEVEPSS 44.76%Jun 8, 2025
- Unknownvercel next.js Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 59.18%Jun 8, 2025
- Unknownzoneminder zoneminder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 6.17%Jun 8, 2025
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.47%Jun 8, 2025
- Unknowncombodo itop Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.75%Jun 8, 2025
- UnknownOracle Retail Xstore Office Pre-Authentication Path TraversalPatch nowKEVEPSS 1.78%Jun 8, 2025
- Unknownthimpress learnpress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 51.39%Jun 8, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.67%Jun 8, 2025
- Unknownjfinalcms_project jfinalcms Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 12.36%Jun 8, 2025
- Unknownleotheme leocustomajax Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.85%Jun 8, 2025
- Unknowncellinx nvt_web_server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.43%Jun 8, 2025