Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownthimpress learnpress Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.05%Mar 31, 2026
- UnknownQualitor qualitor Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 14.31%Mar 24, 2026
- Unknownzeit next.js Relative Path TraversalPatch nowKEVEPSS 44.78%Mar 23, 2026
- High8.1The Import and export users and customers plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.29.7.Patch nowKEVEPSS 0.56%Mar 21, 2026
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.41%Mar 20, 2026
- Critical9.8Mesop is a Python-based UI framework that allows users to build web applications.Patch nowKEVEPSS 4.11%Mar 20, 2026
- High8.6Kan is an open-source project management tool.Patch nowKEVEPSS 1.74%Mar 19, 2026
- UnknownTenda ac6_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 3.29%Mar 11, 2026
- Unknownlollms lollms-webui Path Traversal: '\..\filename'Patch nowKEVEPSS 0.67%Mar 11, 2026
- UnknownTenda hg6_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 19.95%Mar 11, 2026
- UnknownASUS asuswrt Missing AuthorizationPatch nowKEVEPSS 85.16%Mar 11, 2026
- UnknownPath Equivalence: 'filename....' (Multiple Trailing Dot)Patch nowKEVEPSS 2.66%Mar 10, 2026
- Critical9.1Budibase is a low code platform for creating internal tools, workflows, and admin panels.Patch nowKEVEPSS 2.19%Mar 9, 2026
- Critical9.8The Tutor LMS Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 3.9.5 via the Social Login addon.Patch nowKEVEPSS 0.67%Mar 9, 2026
- Critical10.0Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 88.47%Mar 4, 2026
- Critical9.2Qwik is a performance focused javascript framework.Patch nowKEVEPSS 2.95%Mar 3, 2026
- High7.5Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format VulnerabilityPatch nowKEVEPSS 7.32%Feb 25, 2026
- Critical10.0Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass VulnerabilityPatch nowKEVEPSS 89.29%Feb 25, 2026
- Critical9.8FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE).Patch nowKEVEPSS 5.49%Feb 24, 2026
- Unknownmcpjam inspector Missing Authentication for Critical FunctionPatch nowKEVEPSS 67.52%Feb 18, 2026
- UnknownXStream XStream Deserialization of Untrusted DataPatch nowKEVEPSS 11.38%Feb 14, 2026
- High8.7Soliton Systems K.K FileZen OS Command Injection VulnerabilityPatch nowKEVEPSS 5.25%Feb 12, 2026
- Unknownaxllent mailpit Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.81%Feb 11, 2026
- Medium5.5Safetica Kernel Driver Privileged Termination VulnerabilityPatch nowKEVEPSS 0.26%Feb 11, 2026
- Unknownastro astro Storage of File with Sensitive Data Under Web RootPatch nowKEVEPSS 1.54%Feb 11, 2026
Sort