Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0Metabase SQL Injection VulnerabilityPatch nowKEVEPSS 97.34%Aug 6, 2026
- UnknownImproper AuthenticationPatch nowKEVEPSS 0.87%Aug 6, 2026
- UnknownSynacor Zimbra Collaboration Suite (ZCS) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 7.44%Aug 6, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.52%Aug 5, 2026
- Unknownkaliforms contact_form_builder Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.19%Aug 5, 2026
- UnknownDeserialization of Untrusted DataPatch nowKEVEPSS 0.56%Aug 4, 2026
- UnknownRapid7 Analysis: KindaRails2Shell (CVE-2026-66066)Patch nowKEVEPSS 27.86%Aug 3, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.58%Aug 3, 2026
- Unknownb3log siyuan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.39%Aug 3, 2026
- High8.2N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 14.62%Aug 2, 2026
- UnknownFlowiseAI Flowise External Control of File Name or PathPatch nowKEVEPSS 1.57%Aug 2, 2026
- UnknownGitLab GitLab Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 71.64%Aug 2, 2026
- Unknownwpmanageninja ninja_tables Embedded Malicious CodePatch nowKEVEPSS 0.65%Aug 1, 2026
- UnknownEmbedded Malicious CodePatch nowKEVEPSS 0.67%Aug 1, 2026
- UnknownKestra kestra Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 3.30%Aug 1, 2026
- UnknownAdobe ColdFusion Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.95%Aug 1, 2026
- High8.2N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 7.88%Aug 1, 2026
- UnknownLangflow '/api/v1/custom_component' Remote Code ExecutionPatch nowKEVEPSS 63.67%Aug 1, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVJul 31, 2026
- UnknownCritical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)Patch nowKEVEPSS 0.61%Jul 30, 2026
- Critical9.8Broadcom VMware vCenter Path Traversal VulnerabilityPatch nowKEVEPSS 2.56%Jul 30, 2026
- UnknownTOTOLINK a7000r_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 2.42%Jul 30, 2026
- UnknownJenkins git Missing AuthorizationPatch nowKEVEPSS 7.00%Jul 30, 2026
- UnknownMicrosoft Windows Group Policy Elevation of Privilege VulnerabilityPatch nowKEVEPSS 6.40%Jul 30, 2026
- Unknownwebreinvent vaahcms Embedded Malicious CodePatch nowKEVEPSS 0.76%Jul 29, 2026