Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownD-Link dir-868l_firmware Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.82%Oct 9, 2025
- Critical9.8Fortinet FortiWeb Path Traversal VulnerabilityPatch nowKEVEPSS 91.97%Oct 6, 2025
- Critical9.8Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.56%Oct 2, 2025
- High7.8Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions VulnerabilityPatch nowKEVEPSS 8.63%Sep 29, 2025
- High7.7Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution VulnerabilityPatch nowKEVEPSS 41.50%Sep 24, 2025
- High7.1Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.48%Sep 14, 2025
- Unknownsigb pmb Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.17%Sep 14, 2025
- UnknownFortinet FortiWeb Improper Handling of ParametersPatch nowKEVEPSS 10.08%Sep 4, 2025
- UnknownVMware cloud_foundation Deserialization of Untrusted DataPatch nowKEVEPSS 23.31%Sep 3, 2025
- Critical10.0Sangoma FreePBX Authentication Bypass VulnerabilityPatch nowKEVEPSS 95.02%Aug 28, 2025
- Critical9.8Missing Authentication for Critical FunctionPatch nowKEVEPSS 32.87%Aug 25, 2025
- UnknownJuniper Junos OS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.91%Aug 24, 2025
- Unknownhongdian h8922 Direct Request ('Forced Browsing')Patch nowKEVEPSS 2.79%Aug 23, 2025
- Critical9.8Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.74%Aug 22, 2025
- UnknownArcserve udp Incorrect AuthorizationPatch nowKEVEPSS 39.77%Aug 19, 2025
- UnknownZyxel nbg2105_firmware Improper AuthenticationPatch nowKEVEPSS 20.51%Aug 19, 2025
- UnknownApache Superset Deserialization of Untrusted DataPatch nowKEVEPSS 35.45%Aug 12, 2025
- UnknownIBM data_risk_manager Use of Hard-coded CredentialsPatch nowKEVEPSS 71.95%Aug 12, 2025
- UnknownUse of Weak CredentialsPatch nowKEVEPSS 15.83%Aug 6, 2025
- Critical9.8Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 4.53%Aug 1, 2025
- Critical10.0Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.10%Jul 31, 2025
- Medium6.1Qwizcards Reflected Cross-Site Scripting (XSS)Patch nowKEVEPSS 0.49%Jul 23, 2025
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.66%Jul 23, 2025
- Unknownelbtide advanced_booking_calendar Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.48%Jul 20, 2025
- Critical9.8CrushFTP Unprotected Alternate Channel VulnerabilityPatch nowKEVEPSS 93.47%Jul 18, 2025
Sort