Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownAuthentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 3.65%Jul 18, 2025
- Critical10.0Wing FTP Server Improper Neutralization of Null Byte or NUL Character VulnerabilityPatch nowKEVEPSS 93.88%Jul 10, 2025
- Critical9.8Unverified Password ChangePatch nowKEVEPSS 0.66%Jul 9, 2025
- UnknownMissing Authentication for Critical FunctionPatch nowKEVEPSS 10.15%Jul 2, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.43%Jun 26, 2025
- Critical10.0Quest KACE Systems Management Appliance (SMA) Improper Authentication VulnerabilityPatch nowKEVEPSS 2.49%Jun 24, 2025
- High8.7Weaver e-cology Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.12%Jun 23, 2025
- Unknown5vtechnologies blue_angel_software_suite Use of Hard-coded CredentialsPatch nowKEVEPSS 0.66%Jun 23, 2025
- Unknownfit2cloud kubepi Use of Hard-coded CredentialsPatch nowKEVEPSS 69.67%Jun 23, 2025
- Unknownaviatrix controller Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.57%Jun 20, 2025
- High7.5Sitecore experience_commerce Use of Hard-coded CredentialsPatch nowKEVEPSS 55.87%Jun 17, 2025
- UnknownCisco wvc54gca Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 29.82%Jun 16, 2025
- Medium5.6Missing AuthorizationPatch nowKEVEPSS 0.23%Jun 10, 2025
- UnknownUse of Default PasswordPatch nowKEVEPSS 2.40%Jun 8, 2025
- Unknownonline_fire_reporting_system_project online_fire_reporting_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.78%Jun 8, 2025
- Unknownthedigitalcraft atomcms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 7.15%Jun 8, 2025
- Unknownmetinfo metinfo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 12.44%Jun 8, 2025
- UnknownTenda w15e_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 28.80%Jun 5, 2025
- Medium5.3D-Link dcs-932l_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 13.94%Jun 4, 2025
- Unknowntrueranker true_ranker Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 77.94%Jun 3, 2025
- Critical9.3Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 71.44%May 28, 2025
- Unknownsmarsh telemessage Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.25%May 28, 2025
- Critical10.0versa-networks concerto Time-of-check Time-of-use (TOCTOU) Race ConditionPatch nowKEVEPSS 46.10%May 21, 2025
- Critical9.2Versa Concerto Improper Authentication VulnerabilityPatch nowKEVEPSS 81.78%May 21, 2025
- High8.7Smartbedded Meteobridge Command Injection VulnerabilityPatch nowKEVEPSS 93.31%May 21, 2025
Sort