Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.79%Aug 28, 2026
- UnknownIncorrect Privilege AssignmentPatch nowKEVEPSS 0.48%Aug 28, 2026
- UnknownThemeum tutor_lms Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 0.62%Aug 28, 2026
- UnknownImproper Verification of Cryptographic SignaturePatch nowKEVEPSS 0.43%Aug 27, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.37%Aug 27, 2026
- UnknownChannel Accessible by Non-EndpointPatch nowKEVEPSS 0.81%Aug 27, 2026
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.39%Aug 26, 2026
- UnknownSonicWall analytics Use of Password Hash Instead of Password for AuthenticationPatch nowKEVEPSS 7.68%Aug 26, 2026
- UnknownImproper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 0.97%Aug 25, 2026
- UnknownWeak Password Recovery Mechanism for Forgotten PasswordPatch nowKEVEPSS 8.96%Aug 25, 2026
- UnknownRed Hat build_of_keycloak Weak Password Recovery Mechanism for Forgotten PasswordPatch nowKEVEPSS 3.18%Aug 25, 2026
- UnknownRapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)Patch nowKEVEPSS 0.96%Aug 24, 2026
- UnknownIncorrect Privilege AssignmentPatch nowKEVEPSS 0.48%Aug 24, 2026
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.54%Aug 24, 2026
- UnknownImproper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 0.37%Aug 24, 2026
- Unknownacymailing acymailing Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.40%Aug 22, 2026
- Unknownlmsys sglang Improper Input ValidationPatch nowKEVEPSS 0.41%Aug 22, 2026
- UnknownTenda g0_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 25.37%Aug 22, 2026
- Critical9.8SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026.Patch nowKEVEPSS 4.48%Aug 21, 2026
- Critical9.8GeoTools is an open source Java library that provides tools for geospatial data.Patch nowKEVEPSS 3.98%Aug 21, 2026
- UnknownMiniOrange saml_sp_single_sign_on Incorrect Privilege AssignmentPatch nowKEVEPSS 0.37%Aug 21, 2026
- UnknownMiniOrange saml_sp_single_sign_on Improper AuthenticationPatch nowKEVEPSS 1.88%Aug 21, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.83%Aug 21, 2026
- UnknownSPIP SPIP Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.29%Aug 20, 2026
- UnknownVeronaLabs wp_statistics Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.65%Aug 20, 2026