Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1SAP NetWeaver Deserialization VulnerabilityPatch nowKEVEPSS 12.85%Apr 27, 2025
- High8.1ConnectWise ScreenConnect Improper Authentication VulnerabilityPatch nowKEVEPSS 3.54%Apr 25, 2025
- High7.5SonicWall SonicOS NULL Pointer DereferencePatch nowKEVEPSS 0.84%Apr 23, 2025
- Critical9.3XWiki xwiki Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 80.01%Apr 23, 2025
- UnknownWpmet gutenkit Missing AuthorizationPatch nowKEVEPSS 10.45%Apr 23, 2025
- Unknownicegram email_subscribers_\&_newsletters Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 10.16%Apr 23, 2025
- UnknownCisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Uncontrolled Resource ConsumptionPatch nowKEVEPSS 1.85%Apr 23, 2025
- Critical9.3Commvault Command Center Path Traversal VulnerabilityPatch nowKEVEPSS 97.60%Apr 22, 2025
- Critical10.0SAP NetWeaver Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 99.49%Apr 22, 2025
- Critical9.8TOTOLINK a950rg_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.36%Apr 22, 2025
- UnknownSAP NetWeaver Deserialization of Untrusted DataPatch nowKEVEPSS 5.37%Apr 22, 2025
- Medium6.5mojoportal mojoportal Improper Access ControlPatch nowKEVEPSS 1.97%Apr 21, 2025
- UnknownTOTOLINK n600r_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 19.58%Apr 21, 2025
- Critical9.8Improper Privilege ManagementPatch nowKEVEPSS 0.57%Apr 19, 2025
- UnknownTOTOLINK n600r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.54%Apr 19, 2025
- Critical9.2ASUS asus_firmware Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 1.13%Apr 18, 2025
- Critical10.0Craft CMS Code Injection VulnerabilityPatch nowKEVEPSS 99.79%Apr 18, 2025
- Critical9.8Qualitia Active! Mail Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 3.36%Apr 17, 2025
- Unknownglpi-project GLPI Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 86.69%Apr 17, 2025
- High8.6Broadcom Brocade Fabric OS Code Injection VulnerabilityPatch nowKEVEPSS 0.69%Apr 17, 2025
- Critical10.0Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 98.92%Apr 16, 2025
- Critical9.8Apple Multiple Products Arbitrary Read and Write VulnerabilityPatch nowKEVEPSS 13.86%Apr 16, 2025
- Critical9.8Apple Multiple Products Memory Corruption VulnerabilityPatch nowKEVEPSS 20.90%Apr 16, 2025
- Critical9.3Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 19.55%Apr 15, 2025
- Critical9.8TOTOLINK a810r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 34.09%Apr 15, 2025
Sort