Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownWeaver e-cology Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.49%Apr 26, 2026
- High7.5Linux Kernel 'rxgk' Local Privilege EscalationPatch nowKEVEPSS 0.63%Apr 24, 2026
- High8.8Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ.Patch nowKEVEPSS 4.11%Apr 24, 2026
- Medium5.3Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.73%Apr 23, 2026
- Critical10.0Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business.Patch nowKEVEPSS 7.36%Apr 23, 2026
- Critical9.2Rclone is a command-line program to sync files and directories to and from different cloud storage providers.Patch nowKEVEPSS 3.22%Apr 23, 2026
- Critical9.8Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.76%Apr 23, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.33%Apr 23, 2026
- Unknownmailerlite mailerlite Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.43%Apr 23, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.23%Apr 23, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.57%Apr 23, 2026
- Critical9.3ThinkPHP ThinkPHP Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 0.89%Apr 22, 2026
- High7.8Linux Kernel Incorrect Resource Transfer Between Spheres VulnerabilityPatch nowKEVEPSS 3.44%Apr 22, 2026
- UnknownApache ActiveMQ Initialization of a Resource with an Insecure DefaultPatch nowKEVEPSS 7.15%Apr 22, 2026
- Unknowneyoucms eyoucms Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.02%Apr 21, 2026
- Critical9.3IBM collaborative_lifecycle_management Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.65%Apr 21, 2026
- High7.5LMDeploy is a toolkit for compressing, deploying, and serving large language models.Patch nowKEVEPSS 1.51%Apr 20, 2026
- Unknownmjdm majordomo Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 5.70%Apr 18, 2026
- High8.1The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file upload in versions up to, and including, 1.3.9.7.Patch nowKEVEPSS 3.46%Apr 17, 2026
- High7.2The WP Statistics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'utm_source' parameter in all versions up to, and including, 14.16.4.Patch nowKEVEPSS 0.42%Apr 17, 2026
- Critical9.1Use of Hard-coded Cryptographic KeyPatch nowKEVEPSS 0.81%Apr 16, 2026
- Critical10.0Improper Access ControlPatch nowKEVEPSS 1.17%Apr 16, 2026
- Medium6.1cusrev customer_reviews_for_woocommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.29%Apr 16, 2026
- Unknownfacebook react Deserialization of Untrusted DataPatch nowKEVEPSS 66.88%Apr 15, 2026
- UnknownMissing Authentication for Critical FunctionPatch nowKEVEPSS 1.30%Apr 15, 2026