Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownApache OFBiz Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 10.18%Jun 7, 2025
- Unknowntecrail responsive_filemanager Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 8.63%Jun 7, 2025
- Unknownzoneminder zoneminder Improper AuthenticationPatch nowKEVEPSS 7.87%Jun 7, 2025
- Unknownshirne_cms_project shirne_cms Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.54%Jun 7, 2025
- Unknowna3rev page_view_count Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 14.78%Jun 7, 2025
- Unknownauerswald comfortel_3600_ip_firmware Use of Incorrectly-Resolved Name or ReferencePatch nowKEVEPSS 50.13%Jun 7, 2025
- Unknownasgaros asgaros_forum Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 12.56%Jun 7, 2025
- UnknownVmware vSphere Web Client (FLEX/Flash) Unauthorized Arbitrary File Read VulnerabilityPatch nowKEVJun 7, 2025
- UnknownJenkins gitlab_hook Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 92.79%Jun 7, 2025
- Unknownweiphp weiphp Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 8.75%Jun 7, 2025
- UnknownD-Link dir-878_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.41%Jun 7, 2025
- Unknownteclib-edition gestionnaire_libre_de_parc_informatique Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 22.37%Jun 7, 2025
- UnknownSAP internet_graphics_server Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 41.05%Jun 7, 2025
- Unknownrubedo_project rubedo Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 61.44%Jun 7, 2025
- Unknowndompdf dompdf Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 39.37%Jun 7, 2025
- UnknownOracle GlassFish Server, JDeveloper, and WebLogic Server Components Remote Confidentiality VulnerabilityPatch nowKEVEPSS 32.44%Jun 7, 2025
- UnknownOracle Fusion Middleware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 98.22%Jun 7, 2025
- Unknownappserv_open_project appserv Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 6.23%Jun 7, 2025
- Unknownrainbow_portal rainbow.zen Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 5.75%Jun 7, 2025
- Unknownsquirrelmail squirrelmail Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 25.75%Jun 7, 2025
- Critical9.8kunbus revpi_status Incorrect Type Conversion or CastPatch nowKEVEPSS 51.27%Jun 6, 2025
- Unknownwpdevart poll\,_survey\,_questionnaire_and_voting_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 46.00%Jun 6, 2025
- Medium4.6IGEL OS Use of a Key Past its Expiration Date VulnerabilityPatch nowKEVEPSS 4.93%Jun 5, 2025
- UnknownParagon Software Products biontdrv.sys memmove Function Privilege EscalationPatch nowKEVEPSS 0.50%Jun 5, 2025
- Unknownparagon-software paragon_backup_\&_recovery NULL Pointer DereferencePatch nowKEVEPSS 0.35%Jun 5, 2025