Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0Cisco Multiple Products Improper Input Validation VulnerabilityPatch nowKEVEPSS 32.39%Dec 17, 2025
- Unknownappsmith appsmith Improper Access ControlPatch nowKEVEPSS 30.66%Dec 15, 2025
- UnknownTOTOLINK a3002ru Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.99%Dec 15, 2025
- High7.1Gladinet CentreStack and Triofox Hard Coded Cryptographic VulnerabilityPatch nowKEVEPSS 53.30%Dec 12, 2025
- High7.5facebook react Deserialization of Untrusted DataPatch nowKEVEPSS 66.88%Dec 11, 2025
- Critical9.4Langflow Origin Validation Error VulnerabilityPatch nowKEVEPSS 92.81%Dec 5, 2025
- UnknownWSO2 api_control_plane Authentication Bypass by SpoofingPatch nowKEVEPSS 0.85%Nov 28, 2025
- Unknownmaptiler tileserver_php Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.40%Nov 27, 2025
- Unknownimgproxy imgproxy Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.88%Nov 27, 2025
- Unknownpytorch torchserve Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 42.49%Nov 26, 2025
- Critical9.8OSGeo GeoServer Improper Restriction of XML External Entity Reference VulnerabilityPatch nowKEVEPSS 60.01%Nov 25, 2025
- High7.2Fortinet FortiWeb OS Command Injection VulnerabilityPatch nowKEVEPSS 54.72%Nov 18, 2025
- Unknownhtml2wp_project html2wp Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 12.19%Nov 18, 2025
- Unknownemby emby Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 87.15%Nov 18, 2025
- UnknownDitty WordPress Plugin Unauthenticated Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 20.24%Nov 14, 2025
- Medium6.5TOTOLINK a950rg_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 2.54%Nov 13, 2025
- High7.3D-Link dir-882_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 3.93%Nov 13, 2025
- Medium6.5TOTOLINK lr1200gb_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 6.61%Nov 13, 2025
- UnknownAtlassian Confluence Server and Data Center Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 41.22%Nov 5, 2025
- Critical9.8React Native Community CLI OS Command Injection VulnerabilityPatch nowKEVEPSS 93.98%Nov 3, 2025
- UnknownApache Solr Improper AuthenticationPatch nowKEVEPSS 92.75%Oct 31, 2025
- Critical9.3kubernetes operations Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.40%Oct 30, 2025
- Critical9.3Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel VulnerabilityPatch nowKEVEPSS 2.77%Oct 20, 2025
- UnknownCisco smart_software_manager_on-prem Unverified Password ChangePatch nowKEVEPSS 80.64%Oct 17, 2025
- UnknownAdobe experience_manager Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.92%Oct 16, 2025
Sort