Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3st._joe_erp_system_project st._joe_erp_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.11%Apr 14, 2025
- UnknownInstaWP instawp_connect Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 10.60%Apr 11, 2025
- UnknownSureTriggers suretriggers Incorrect ComparisonPatch nowKEVEPSS 76.24%Apr 9, 2025
- Critical9.8Yiiframework Yii Improper Protection of Alternate Path VulnerabilityPatch nowKEVEPSS 87.76%Apr 9, 2025
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free VulnerabilityPatch nowKEVEPSS 19.25%Apr 8, 2025
- Critical9.8Langflow Missing Authentication VulnerabilityPatch nowKEVEPSS 99.99%Apr 7, 2025
- Unknowneset internet_security Uncontrolled Search Path ElementPatch nowKEVEPSS 2.07%Apr 7, 2025
- UnknownDell dbutildrv2.sys_firmware Improper AuthorizationPatch nowKEVEPSS 0.27%Apr 7, 2025
- Critical9.8booster booster_for_woocommerce Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.70%Apr 4, 2025
- Critical9.8WooCommerce Order Delivery Date Pro Unauthenticated Arbitrary Option Update VulnerabilityPatch nowKEVEPSS 1.39%Apr 4, 2025
- Unknownuncannyowl uncanny_automator Missing AuthorizationPatch nowKEVEPSS 2.70%Apr 4, 2025
- Critical9.8Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key VulnerabilityPatch nowKEVEPSS 94.34%Apr 3, 2025
- UnknownMicrosoft Windows Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 23.33%Apr 3, 2025
- UnknownMicrosoft Windows Protection Mechanism FailurePatch nowKEVEPSS 1.21%Apr 3, 2025
- Critical9.8Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.98%Apr 3, 2025
- UnknownMicrosoft Windows Improper Input ValidationPatch nowKEVEPSS 3.08%Apr 3, 2025
- UnknownApache camel Improper Neutralization of Internal Special ElementsPatch nowKEVEPSS 76.09%Apr 2, 2025
- Unknowninfornweb news_\&_blog_designer_pack Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.86%Apr 1, 2025
- High7.5Vite Vitejs Improper Access Control VulnerabilityPatch nowKEVEPSS 65.76%Mar 31, 2025
- UnknownFlowiseAI Flowise Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 55.87%Mar 31, 2025
- UnknownGL.iNet API Endpoint Information Disclosure VulnerabilityPatch nowKEVEPSS 29.70%Mar 31, 2025
- UnknownCisco meraki_mx64_firmware Failure to Handle Missing ParameterPatch nowKEVEPSS 1.14%Mar 31, 2025
- UnknownCrushFTP Authorization Bypass RCEPatch nowKEVMar 30, 2025
- UnknownA-blog CMS Untrusted Data DeserializationPatch nowKEVEPSS 0.50%Mar 28, 2025
- Unknownvercel next.js Improper AuthorizationPatch nowKEVEPSS 99.22%Mar 28, 2025
Sort