Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownsmarsh telemessage Insecure Storage of Sensitive InformationPatch nowKEVEPSS 0.32%May 28, 2025
- Medium4.0TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere VulnerabilityPatch nowKEVEPSS 0.55%May 28, 2025
- Medium5.3TeleMessage TM SGNL Initialization of a Resource with an Insecure Default VulnerabilityPatch nowKEVEPSS 11.10%May 28, 2025
- Unknownsmarsh telemessage Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.25%May 28, 2025
- Unknownsmarsh telemessage Use of Password Hash Instead of Password for AuthenticationPatch nowKEVEPSS 0.26%May 28, 2025
- Unknowniptanus wordpress_file_upload Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 93.34%May 27, 2025
- Unknownanji-plus report Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 51.75%May 27, 2025
- Unknownroxyfileman roxy_fileman Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 73.06%May 27, 2025
- UnknownElastic Elasticsearch Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 94.79%May 27, 2025
- Unknownaviary_image_editor_add-on_for_gravity_forms_project aviary_image_editor_add-on_for_gravity_forms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 40.59%May 27, 2025
- Critical9.0vBulletin vBulletin Improper Protection of Alternate PathPatch nowKEVEPSS 57.64%May 26, 2025
- Critical10.0vBulletin vBulletin Improper Protection of Alternate PathPatch nowKEVEPSS 75.84%May 26, 2025
- Critical9.8Incorrect Privilege AssignmentPatch nowKEVEPSS 0.49%May 23, 2025
- High8.1scripteo ads_pro Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.78%May 23, 2025
- High7.5mapsvg mapsvg Missing AuthorizationPatch nowKEVEPSS 0.43%May 22, 2025
- Medium6.5infoblox netmri Improper AuthenticationPatch nowKEVEPSS 39.75%May 22, 2025
- Critical9.8infoblox netmri Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 36.41%May 22, 2025
- High7.2infoblox netmri Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 43.89%May 22, 2025
- UnknownCisco secure_firewall_threat_defense Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 96.59%May 22, 2025
- UnknownCisco IOS HTTP Server '?/' String VulnerabilityPatch nowKEVEPSS 4.29%May 22, 2025
- Critical10.0versa-networks concerto Time-of-check Time-of-use (TOCTOU) Race ConditionPatch nowKEVEPSS 45.82%May 21, 2025
- Critical9.2Versa Concerto Improper Authentication VulnerabilityPatch nowKEVEPSS 81.78%May 21, 2025
- High8.7Smartbedded Meteobridge Command Injection VulnerabilityPatch nowKEVEPSS 93.31%May 21, 2025
- UnknownBlog Designer PRO for WordPress Local File Inclusion VulnerabilityPatch nowKEVEPSS 0.58%May 21, 2025
- High8.8Linux Kernel 'sess->user' Object Use‑After‑Free VulnerabilityPatch nowKEVEPSS 0.88%May 20, 2025