Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9TOTOLINK a720r_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 14.03%May 5, 2025
- High8.8Srimax Output Messenger Directory Traversal VulnerabilityPatch nowKEVEPSS 1.86%May 5, 2025
- High7.5depicter depicter Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 45.75%May 5, 2025
- Unknowntrendnet tew-411brpplus_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 4.43%May 4, 2025
- Unknowncasbin casdoor Improper AuthorizationPatch nowKEVEPSS 1.82%May 2, 2025
- Medium6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.24%May 2, 2025
- UnknownZKTeco BioTime Files or Directories Accessible to External PartiesPatch nowKEVEPSS 2.66%May 2, 2025
- UnknownZKTeco BioTime Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.26%May 2, 2025
- Medium6.3TOTOLINK ca600-poe_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 0.94%May 1, 2025
- Medium5.3XWiki xwiki Missing AuthorizationPatch nowKEVEPSS 1.05%Apr 30, 2025
- Medium6.1XWiki xwiki URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 0.58%Apr 30, 2025
- Critical9.8SureTriggers suretriggers Incorrect Privilege AssignmentPatch nowKEVEPSS 54.19%Apr 30, 2025
- Medium5.3Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.07%Apr 29, 2025
- Critical9.4showdoc showdoc Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 2.65%Apr 29, 2025
- UnknownMDaemon Email Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.64%Apr 29, 2025
- Unknowntipask tipask Download of Code Without Integrity CheckPatch nowKEVEPSS 0.67%Apr 29, 2025
- Unknownfiberhome hg6245d_firmware Use of Hard-coded CredentialsPatch nowKEVEPSS 27.82%Apr 29, 2025
- Unknownthecontrolgroup voyager Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 1.22%Apr 29, 2025
- UnknownLaravel Laravel Framework Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 86.92%Apr 29, 2025
- Unknownvitejs vite Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 74.77%Apr 28, 2025
- Medium5.3TOTOLINK n150rt_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 11.28%Apr 27, 2025
- Critical9.1SAP NetWeaver Deserialization VulnerabilityPatch nowKEVEPSS 12.85%Apr 27, 2025
- High8.1ConnectWise ScreenConnect Improper Authentication VulnerabilityPatch nowKEVEPSS 3.54%Apr 25, 2025
- High7.5SonicWall SonicOS NULL Pointer DereferencePatch nowKEVEPSS 0.84%Apr 23, 2025
- Critical9.3XWiki xwiki Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 80.01%Apr 23, 2025
Sort