Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.Patch nowKEVEPSS 4.68%May 5, 2026
- High7.7Redis is an in-memory data structure store.Patch nowKEVEPSS 3.66%May 5, 2026
- Critical9.1Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.56%May 5, 2026
- Medium6.9Arista Extensible Operating System Incomplete Comparison with Missing Factors VulnerabilityPatch nowKEVEPSS 0.65%May 5, 2026
- Critical9.3Palo Alto Networks PAN-OS Out-of-bounds Write VulnerabilityPatch nowKEVEPSS 31.72%May 5, 2026
- Unknowncleantalk security_\&_malware_scan Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.58%May 5, 2026
- Unknownscriptsbundle adforest Weak Password Recovery Mechanism for Forgotten PasswordPatch nowKEVEPSS 0.72%May 5, 2026
- Unknownscriptsbundle adforest Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 1.22%May 5, 2026
- Critical9.2workiva arelle Missing Authentication for Critical FunctionPatch nowKEVEPSS 3.88%May 4, 2026
- High8.8Ollama before 0.17.1 contains a heap out-of-bounds read vulnerability in the GGUF model loader.Patch nowKEVEPSS 0.71%May 4, 2026
- UnknownStellarWP the_events_calendar Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.35%May 4, 2026
- Unknowncridio listingpro Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.40%May 4, 2026
- Unknownmetagauss registrationmagic Improper Privilege ManagementPatch nowKEVEPSS 1.65%May 4, 2026
- UnknownWP Go Maps AJAX Action Unathenticated Cross-Site Scripting (XSS)Patch nowKEVEPSS 1.98%May 4, 2026
- Unknownsitesao dhvc_form Incorrect Privilege AssignmentPatch nowKEVEPSS 0.55%May 4, 2026
- Unknownays-pro quiz_maker Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 11.76%May 4, 2026
- Unknownicegram icegram_express Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.45%May 4, 2026
- Unknownweb-shop-host startklar_elmentor_addons Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.52%May 4, 2026
- Unknownwppa wp_photo_album_plus Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.86%May 4, 2026
- Unknownkreaturamedia layerslider Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 18.40%May 4, 2026
- Unknownbooster booster_for_woocommerce Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.70%May 4, 2026
- UnknownThemeREX addons Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.89%May 4, 2026
- Unknowncontempothemes real_estate_7 Incorrect Privilege AssignmentPatch nowKEVEPSS 0.78%May 4, 2026
- UnknownFavethemes homey Improper Privilege ManagementPatch nowKEVEPSS 0.43%May 4, 2026
- UnknownCodeDropz drag_and_drop_multiple_file_upload_-_contact_form_7 Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.79%May 4, 2026