Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3TOTOLINK x2000r_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 13.20%Jun 3, 2025
- High8.1Path Traversal: '.../...//'Patch nowKEVEPSS 0.65%Jun 3, 2025
- UnknownWP Job Portal WordPress Plugin Unauthenticated SQL InjectionPatch nowKEVEPSS 3.60%Jun 3, 2025
- Unknownroxy-wi roxy-wi Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 28.79%Jun 3, 2025
- Unknowntrueranker true_ranker Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 77.94%Jun 3, 2025
- Critical9.0Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 96.91%Jun 2, 2025
- High8.8Google Chromium V8 Out-of-Bounds Read and Write VulnerabilityPatch nowKEVEPSS 7.82%Jun 2, 2025
- High7.5Qualcomm Multiple Chipsets Use-After-Free VulnerabilityPatch nowKEVEPSS 1.02%Jun 2, 2025
- High8.6Qualcomm Multiple Chipsets Incorrect Authorization VulnerabilityPatch nowKEVEPSS 0.46%Jun 2, 2025
- High8.6Qualcomm Multiple Chipsets Incorrect Authorization VulnerabilityPatch nowKEVEPSS 0.84%Jun 2, 2025
- High8.8RoundCube Webmail Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 98.97%Jun 1, 2025
- Medium4.7relevanssi relevanssi Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.22%May 31, 2025
- High8.8Missing AuthorizationPatch nowKEVEPSS 0.32%May 30, 2025
- Critical9.3Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 71.60%May 28, 2025
- Unknownsmarsh telemessage Cleartext Storage of Sensitive Information in MemoryPatch nowKEVEPSS 0.14%May 28, 2025
- Unknownsmarsh telemessage Insecure Storage of Sensitive InformationPatch nowKEVEPSS 0.33%May 28, 2025
- Medium4.0TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere VulnerabilityPatch nowKEVEPSS 0.58%May 28, 2025
- Medium5.3TeleMessage TM SGNL Initialization of a Resource with an Insecure Default VulnerabilityPatch nowKEVEPSS 11.57%May 28, 2025
- Unknownsmarsh telemessage Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.27%May 28, 2025
- Unknownsmarsh telemessage Use of Password Hash Instead of Password for AuthenticationPatch nowKEVEPSS 0.27%May 28, 2025
- Unknownanji-plus report Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 51.75%May 27, 2025
- Unknownroxyfileman roxy_fileman Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 73.06%May 27, 2025
- UnknownElastic Elasticsearch Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 94.79%May 27, 2025
- Unknownaviary_image_editor_add-on_for_gravity_forms_project aviary_image_editor_add-on_for_gravity_forms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 40.59%May 27, 2025
- Critical9.0vBulletin vBulletin Improper Protection of Alternate PathPatch nowKEVEPSS 57.30%May 26, 2025
Sort