Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownSPIP SPIP Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.29%Aug 20, 2026
- UnknownVeronaLabs wp_statistics Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.65%Aug 20, 2026
- Critical9.3Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 23.16%Aug 19, 2026
- UnknownImproper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 0.86%Aug 19, 2026
- Unknowncozmoslabs translatepress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Aug 19, 2026
- Critical9.8Gitea Code Injection VulnerabilityPatch nowKEVEPSS 23.99%Aug 19, 2026
- UnknownCritical Unauthenticated File Upload to RCE in Elementor Pro PluginPatch nowKEVEPSS 1.99%Aug 19, 2026
- Unknownmotopress restaurant_menu Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.47%Aug 18, 2026
- Unknownwpcompress wp_compress Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.86%Aug 18, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Aug 18, 2026
- Unknownfrangoteam fuxa Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 6.92%Aug 18, 2026
- Critical9.3MLflow Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 9.84%Aug 17, 2026
- UnknownGitLab GitLab Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 60.20%Aug 17, 2026
- UnknownTOTOLINK x6000r_firmware Improper Input ValidationPatch nowKEVEPSS 0.85%Aug 17, 2026
- Unknownpodsfoundation pods Incorrect AuthorizationPatch nowKEVEPSS 3.52%Aug 15, 2026
- Unknowncozmoslabs profile_builder Incorrect Type Conversion or CastPatch nowKEVEPSS 3.90%Aug 15, 2026
- UnknownOracle WebLogic Server Console Component Remote Code ExecutionPatch nowKEVEPSS 70.45%Aug 15, 2026
- UnknownSymantec messaging_gateway Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 53.98%Aug 15, 2026
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.85%Aug 14, 2026
- UnknownBoldGrid w3_total_cache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.43%Aug 14, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.45%Aug 14, 2026
- High8.9Zimbra Collaboration Suite (ZCS) OS Command Injection VulnerabilityPatch nowKEVEPSS 71.66%Aug 13, 2026
- Unknownmilvus milvus Missing Authentication for Critical FunctionPatch nowKEVEPSS 4.56%Aug 13, 2026
- UnknownD-Link dir-868l_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.97%Aug 13, 2026
- UnknownD-Link dir-823x_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 4.74%Aug 13, 2026