Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownbalbooa gridbox Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.52%Jul 29, 2026
- Unknownbalbooa gridbox Improper Access ControlPatch nowKEVEPSS 0.52%Jul 29, 2026
- Medium5.3Cisco Secure Firewall Management Center Use of Hard-coded Password VulnerabilityPatch nowKEVEPSS 35.10%Jul 29, 2026
- Critical9.3vBulletin vBulletin Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 5.61%Jul 27, 2026
- High8.8JFrog Artifactory Incorrect Authorization VulnerabilityPatch nowKEVEPSS 8.64%Jul 27, 2026
- Critical9.8JetBrains TeamCity Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 89.57%Jul 27, 2026
- Unknownnetflix conductor Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 14.69%Jul 27, 2026
- Critical10.0Arista VeloCloud Orchestrator On-Prem OS Command Injection VulnerabilityPatch nowKEVEPSS 1.00%Jul 27, 2026
- UnknownLiteLLM LiteLLM Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.90%Jul 26, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Jul 24, 2026
- Unknownalibaba fastjson Improper Input ValidationPatch nowKEVEPSS 0.66%Jul 23, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 8.04%Jul 21, 2026
- Unknownphpbb phpbb Improper AuthenticationPatch nowKEVEPSS 2.89%Jul 20, 2026
- UnknownApache Struts Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 45.85%Jul 20, 2026
- Unknowneclipse jetty Improper Access ControlPatch nowKEVEPSS 6.36%Jul 20, 2026
- Unknownmortbay_jetty jetty Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.86%Jul 20, 2026
- Unknownphpsysinfo phpsysinfo Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 5.18%Jul 20, 2026
- Critical9.3Check Point SmartConsole Improper Authentication VulnerabilityPatch nowKEVEPSS 77.97%Jul 19, 2026
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.43%Jul 18, 2026
- Critical9.8IBM Langflow Code Injection VulnerabilityPatch nowKEVEPSS 28.66%Jul 17, 2026
- Critical9.3Sangoma Switchvox SQL Injection VulnerabilityPatch nowKEVEPSS 18.98%Jul 17, 2026
- Critical9.8WordPress Core Interpretation Conflict VulnerabilityPatch nowKEVEPSS 10.65%Jul 17, 2026
- Medium5.9WordPress Core SQL Injection VulnerabilityPatch nowKEVEPSS 5.32%Jul 17, 2026
- UnknownFlowiseAI Flowise Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 3.41%Jul 17, 2026
- UnknownFlowiseAI Flowise Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 1.78%Jul 17, 2026