Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.2PHP PHP Use After FreePatch nowKEVEPSS 100.00%Oct 21, 2026
- Critical9.2PHP PHP Use After FreePatch nowKEVEPSS 99.98%Oct 21, 2026
- Critical9.3CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian productsPatch nowKEVEPSS 99.48%Oct 5, 2026
- Critical9.5Citrix NetScaler Improper Input Validation VulnerabilityPatch nowKEVEPSS 82.16%Sep 27, 2026
- Critical9.3F5 BIG-IP APM Heap-based Buffer Overflow VulnerabilityPatch nowKEVEPSS 24.94%Sep 22, 2026
- High8.1WordPress Core Remote File Inclusion VulnerabilityPatch nowKEVEPSS 95.77%Sep 22, 2026
- Critical10.0GitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityPatch nowKEVEPSS 97.36%Sep 11, 2026
- Critical10.0Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityPatch nowKEVEPSS 3.95%Sep 7, 2026
- Critical9.8JFrog Artifactory Improper Authentication VulnerabilityPatch nowKEVEPSS 14.37%Aug 28, 2026
- High7.5JFrog Artifactory Improper Authentication VulnerabilityPatch nowKEVEPSS 9.80%Aug 12, 2026
- UnknownRapid7 Analysis: KindaRails2Shell (CVE-2026-66066)Patch nowKEVEPSS 26.52%Aug 3, 2026
- Critical9.3vBulletin vBulletin Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 5.61%Jul 27, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 3.04%Jul 14, 2026
- High8.8Citrix NetScaler ADC and NetScaler Gateway Out-of-bounds ReadPatch nowKEVEPSS 0.50%Jun 30, 2026
- Critical10.0Ivanti Sentry OS Command Injection VulnerabilityPatch nowKEVEPSS 99.91%Jun 9, 2026
- Critical9.8Progress LoadMaster Command Injection VulnerabilityPatch nowKEVEPSS 99.84%Jun 4, 2026
- Critical9.3Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 26.16%May 26, 2026
- Critical9.8Drupal Core SQL Injection VulnerabilityPatch nowKEVEPSS 89.38%May 20, 2026
- Critical9.2NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.Patch nowKEVEPSS 68.05%May 13, 2026
- Critical9.3WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 98.53%Apr 28, 2026
- Critical9.8Fortinet FortiSandbox Path Traversal: '../filedir'Patch nowKEVEPSS 22.22%Apr 14, 2026
- High8.8Apache ActiveMQ Improper Input Validation VulnerabilityPatch nowKEVEPSS 98.26%Apr 7, 2026
- Critical9.8Mesop is a Python-based UI framework that allows users to build web applications.Patch nowKEVEPSS 5.29%Mar 20, 2026
- Critical10.0Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 88.47%Mar 4, 2026
- High7.5Ghost is a Node.js content management system.Patch nowKEVEPSS 71.09%Feb 20, 2026
Sort