Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Eventin Plugin REST API Privilege Escalation VulnerbailityPatch nowKEVEPSS 27.88%May 7, 2025
- High8.8SonicWall SMA 100 Appliances Files or Directories Accessible to External PartiesPatch nowKEVEPSS 6.45%May 7, 2025
- Critical9.8Samsung MagicINFO 9 Server Path Traversal VulnerabilityPatch nowKEVEPSS 24.07%May 6, 2025
- Medium6.9oretnom23 stock_management_system Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 0.66%May 5, 2025
- Medium5.3Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.33%May 5, 2025
- Medium6.9TOTOLINK a720r_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 14.03%May 5, 2025
- High8.8Srimax Output Messenger Directory Traversal VulnerabilityPatch nowKEVEPSS 1.86%May 5, 2025
- High7.5depicter depicter Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 45.75%May 5, 2025
- Unknowntrendnet tew-411brpplus_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 4.43%May 4, 2025
- Unknowncasbin casdoor Improper AuthorizationPatch nowKEVEPSS 1.82%May 2, 2025
- Medium6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.24%May 2, 2025
- UnknownZKTeco BioTime Files or Directories Accessible to External PartiesPatch nowKEVEPSS 2.66%May 2, 2025
- UnknownZKTeco BioTime Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.26%May 2, 2025
- Medium6.3TOTOLINK ca600-poe_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 0.94%May 1, 2025
- Medium5.3XWiki xwiki Missing AuthorizationPatch nowKEVEPSS 1.05%Apr 30, 2025
- Medium6.1XWiki xwiki URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 0.58%Apr 30, 2025
- Critical9.8SureTriggers suretriggers Incorrect Privilege AssignmentPatch nowKEVEPSS 54.19%Apr 30, 2025
- Medium5.3Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.07%Apr 29, 2025
- Critical9.4showdoc showdoc Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 2.65%Apr 29, 2025
- UnknownMDaemon Email Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.64%Apr 29, 2025
- Unknowntipask tipask Download of Code Without Integrity CheckPatch nowKEVEPSS 0.67%Apr 29, 2025
- Unknownfiberhome hg6245d_firmware Use of Hard-coded CredentialsPatch nowKEVEPSS 27.82%Apr 29, 2025
- Unknownthecontrolgroup voyager Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 1.22%Apr 29, 2025
- UnknownLaravel Laravel Framework Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 86.92%Apr 29, 2025
- Unknownvitejs vite Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 74.77%Apr 28, 2025