Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2026-64641 is named in a Cloudflare managed-rules release.Check if you run itEPSS 0.86%Jul 21, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 3.04%Jul 14, 2026
- High8.8Citrix NetScaler ADC and NetScaler Gateway Out-of-bounds ReadPatch nowKEVEPSS 0.50%Jun 30, 2026
- Critical10.0Ivanti Sentry OS Command Injection VulnerabilityPatch nowKEVEPSS 99.91%Jun 9, 2026
- Critical9.8Progress LoadMaster Command Injection VulnerabilityPatch nowKEVEPSS 99.84%Jun 4, 2026
- Critical9.3Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 26.16%May 26, 2026
- Critical9.8Drupal Core SQL Injection VulnerabilityPatch nowKEVEPSS 89.38%May 20, 2026
- Critical9.2NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.Patch nowKEVEPSS 68.05%May 13, 2026
- High7.5Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 1.59%May 7, 2026
- Critical9.3WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 98.53%Apr 28, 2026
- UnknownCVE-2026-23864 is named in a Cloudflare managed-rules release.Check if you run itEPSS 2.58%Apr 15, 2026
- Critical9.8Fortinet FortiSandbox Path Traversal: '../filedir'Patch nowKEVEPSS 22.22%Apr 14, 2026
- High8.1Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 1.95%Apr 10, 2026
- High7.5A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack and react-se…Check if you run itEPSS 1.55%Apr 8, 2026
- High8.8Apache ActiveMQ Improper Input Validation VulnerabilityPatch nowKEVEPSS 98.26%Apr 7, 2026
- UnknownCVE-2025-40552 is named in a Cloudflare managed-rules release.Check this weekEPSS 52.00%Apr 7, 2026
- Critical9.8Mesop is a Python-based UI framework that allows users to build web applications.Patch nowKEVEPSS 5.29%Mar 20, 2026
- Critical10.0Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 88.47%Mar 4, 2026
- High7.5Ghost is a Node.js content management system.Patch nowKEVEPSS 71.09%Feb 20, 2026
- Unknownmcpjam inspector Missing Authentication for Critical FunctionPatch nowKEVEPSS 67.52%Feb 18, 2026
- Critical9.8Fortinet FortiClient EMS SQL Injection VulnerabilityPatch nowKEVEPSS 97.73%Feb 6, 2026
- Critical9.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityPatch nowKEVEPSS 98.64%Jan 29, 2026
- Critical9.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityPatch nowKEVEPSS 98.69%Jan 29, 2026
- Critical9.3SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 96.43%Jan 22, 2026
- Critical10.0SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 85.66%Dec 28, 2025
Sort