Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownthrivethemes thrive_themes_builder Missing AuthorizationPatch nowKEVEPSS 0.36%May 4, 2026
- UnknownWordPress wordpress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 79.53%May 4, 2026
- Unknown10web photo_gallery Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 43.35%May 4, 2026
- Unknownupdraftplus updraftplus Incorrect AuthorizationPatch nowKEVEPSS 2.07%May 4, 2026
- High7.2brizy brizy Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.43%May 2, 2026
- Critical9.8Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.87%May 2, 2026
- UnknownApache brpc Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 25.52%May 1, 2026
- UnknownSolarWinds web_help_desk Weak AuthenticationPatch nowKEVEPSS 60.64%May 1, 2026
- UnknownGrafana Snapshot Feature Remote API Denial of ServicePatch nowKEVEPSS 83.04%May 1, 2026
- Critical9.3Synway smg_gateway_management_software Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 5.73%Apr 30, 2026
- Unknownastro \@astrojs\/cloudflare Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.87%Apr 30, 2026
- Unknownliquidfiles liquidfiles Authentication Bypass by Primary WeaknessPatch nowKEVEPSS 0.77%Apr 30, 2026
- UnknownUse of Weak CredentialsPatch nowKEVEPSS 1.39%Apr 30, 2026
- Unknownvitest.dev vitest Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.40%Apr 30, 2026
- Unknownlfprojects mlflow Path Traversal: '\..\filename'Patch nowKEVEPSS 89.72%Apr 30, 2026
- Critical9.3Weaver e-office Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.77%Apr 30, 2026
- High8.7Weaver e-cology Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.70%Apr 30, 2026
- Unknownblocksera cryptocurrency_widgets_pack Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.84%Apr 30, 2026
- Critical9.8Cockpit v2.13.5 and earlier is vulnerable to arbitrary code execution via the filter parameter within multiple endpoints.Patch nowKEVEPSS 0.73%Apr 29, 2026
- UnknownJoomSport – for Sports: Team & League 'sortf' SQL InjectionPatch nowKEVEPSS 1.34%Apr 29, 2026
- High8.1ProFTPD ProFTPD Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 7.31%Apr 28, 2026
- Critical9.2opencats opencats Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 3.43%Apr 28, 2026
- Critical9.3WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 98.53%Apr 28, 2026
- Critical9.3BerriAI LiteLLM SQL Injection VulnerabilityPatch nowKEVEPSS 5.77%Apr 27, 2026
- UnknownQinglong Case-sensitive Path Matching Authentication BypassPatch nowKEVApr 26, 2026