Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownartica pandora_fms Missing Authentication for Critical FunctionPatch nowKEVEPSS 4.81%Apr 8, 2026
- Unknownpandorafms pandora_fms Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 90.99%Apr 8, 2026
- Medium6.3Vite is a frontend tooling framework for JavaScript.Patch nowKEVEPSS 0.98%Apr 7, 2026
- High8.2Vite is a frontend tooling framework for JavaScript.Patch nowKEVEPSS 1.54%Apr 7, 2026
- Critical9.8Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization.Patch nowKEVEPSS 9.22%Apr 7, 2026
- High8.8Apache ActiveMQ Improper Input Validation VulnerabilityPatch nowKEVEPSS 15.49%Apr 7, 2026
- High8.6Adobe Acrobat and Reader Prototype Pollution VulnerabilityPatch nowKEVEPSS 2.18%Apr 7, 2026
- Critical9.3nextendweb smart_slider_3 Embedded Malicious CodePatch nowKEVEPSS 0.97%Apr 7, 2026
- Critical9.3Weaver e-cology Missing Authentication for Critical FunctionPatch nowKEVEPSS 20.36%Apr 7, 2026
- UnknownApple macos Improper AuthorizationPatch nowKEVEPSS 0.20%Apr 7, 2026
- UnknownApple iOS/iPadOS/visionOS and macOS Sequoia/Tahoe FaceTime Password DisclosurePatch nowKEVEPSS 0.86%Apr 7, 2026
- UnknownApple macos Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 0.27%Apr 7, 2026
- UnknownApple macOS Sequoia/Sonoma/Tahoe Log Entry Data Redaction VulnerabilityPatch nowKEVEPSS 0.18%Apr 7, 2026
- UnknownApple iOS/iPadOS and macOS Sequoia/Sonoma/Tahoe Privilege EscalationPatch nowKEVEPSS 0.18%Apr 7, 2026
- UnknownApple macos Improper Input ValidationPatch nowKEVEPSS 0.20%Apr 7, 2026
- UnknownApple Safari/iOS/iPadOS/visionOS/watchOS and macOS Sequoia Interface Spoofing VulnerabilityPatch nowKEVEPSS 0.80%Apr 7, 2026
- Unknownthimpress wp_hotel_booking Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.15%Apr 7, 2026
- High8.7LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.Patch nowKEVEPSS 3.98%Apr 6, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.47%Apr 6, 2026
- Critical9.8ninjaforms ninja_forms_file_uploads Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 62.90%Apr 6, 2026
- Unknowntinyproxy_project tinyproxy Use After FreePatch nowKEVEPSS 63.08%Apr 6, 2026
- Unknownfit2cloud 1panel Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.97%Apr 6, 2026
- Critical9.3topsecgroup tianxin_internet_behavior_management_system Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.17%Apr 6, 2026
- UnknownFlowiseAI Flowise Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 86.22%Apr 5, 2026
- UnknownStrapi Strapi Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 70.60%Apr 4, 2026