Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownOSGeo geonetwork Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.19%Sep 3, 2026
- High7.8SonicWall SMA1000 Appliances OS Command Injection VulnerabilityPatch nowKEVEPSS 9.89%Sep 1, 2026
- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 8.04%Sep 1, 2026
- Unknownproxmox virtual_environment Missing Critical Step in AuthenticationPatch nowKEVEPSS 3.06%Sep 1, 2026
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.40%Aug 31, 2026
- Critical9.1Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.24%Aug 29, 2026
- Critical9.8JFrog Artifactory Improper Authentication VulnerabilityPatch nowKEVEPSS 14.37%Aug 28, 2026
- UnknownUnauthenticated PHP Object Injection to Remote Code Execution on GiveWPPatch nowKEVEPSS 2.25%Aug 28, 2026
- Critical9.4PaperCut NG/MF Unsafe Reflection VulnerabilityPatch nowKEVEPSS 63.53%Aug 28, 2026
- High8.8PaperCut NG/MF Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 85.58%Aug 28, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.79%Aug 28, 2026
- UnknownImproper Verification of Cryptographic SignaturePatch nowKEVEPSS 0.43%Aug 27, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.37%Aug 27, 2026
- UnknownImproper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 0.97%Aug 25, 2026
- UnknownWeak Password Recovery Mechanism for Forgotten PasswordPatch nowKEVEPSS 8.96%Aug 25, 2026
- UnknownRed Hat build_of_keycloak Weak Password Recovery Mechanism for Forgotten PasswordPatch nowKEVEPSS 6.41%Aug 25, 2026
- UnknownImproper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 0.37%Aug 24, 2026
- Unknownacymailing acymailing Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.40%Aug 22, 2026
- Critical9.8GeoTools is an open source Java library that provides tools for geospatial data.Patch nowKEVEPSS 3.98%Aug 21, 2026
- UnknownMiniOrange saml_sp_single_sign_on Improper AuthenticationPatch nowKEVEPSS 2.36%Aug 21, 2026
- UnknownSPIP SPIP Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.29%Aug 20, 2026
- UnknownVeronaLabs wp_statistics Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.65%Aug 20, 2026
- Critical9.8Gitea Code Injection VulnerabilityPatch nowKEVEPSS 23.99%Aug 19, 2026
- Critical9.3MLflow Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 10.02%Aug 17, 2026
- Critical9.1GitLab GitLab Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 60.20%Aug 17, 2026
Sort