Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.55%Sep 30, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.46%Sep 30, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.45%Sep 30, 2026
- UnknownExternal Control of File Name or PathPatch nowKEVEPSS 0.99%Sep 29, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.46%Sep 29, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.48%Sep 29, 2026
- High8.8Apple Multiple Products Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 1.24%Sep 28, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.71%Sep 28, 2026
- Critical9.5Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityPatch nowKEVEPSS 5.30%Sep 27, 2026
- Critical9.5Citrix NetScaler Improper Input Validation VulnerabilityPatch nowKEVEPSS 4.72%Sep 27, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 0.95%Sep 27, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.18%Sep 25, 2026
- UnknownAuthorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 0.37%Sep 25, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.27%Sep 25, 2026
- Unknownelementor Website Builder Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.13%Sep 25, 2026
- Medium4.9ShortPixel image_optimizer Deserialization of Untrusted DataPatch nowKEVEPSS 0.21%Sep 24, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.89%Sep 24, 2026
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.59%Sep 24, 2026
- High8.6plex media_server External Control of File Name or PathPatch nowKEVEPSS 0.82%Sep 23, 2026
- Medium5.3plex media_server Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.46%Sep 23, 2026
- Medium6.9plex media_server Improper Neutralization of Encoded URI Schemes in a Web PagePatch nowKEVEPSS 0.46%Sep 23, 2026
- Medium5.3plex media_server Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.46%Sep 23, 2026
- Critical9.3F5 BIG-IP APM Heap-based Buffer Overflow VulnerabilityPatch nowKEVEPSS 2.23%Sep 22, 2026
- Critical9.5Arista VeloCloud Orchestrator Improper Input Validation VulnerabilityPatch nowKEVEPSS 1.06%Sep 22, 2026
- Critical9.8Check Point Multiple Products Path Traversal VulnerabilityPatch nowKEVEPSS 75.87%Sep 22, 2026
Sort