Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion VulnerabilityPatch nowKEVEPSS 48.87%Dec 22, 2025
- High7.5facebook react Deserialization of Untrusted DataPatch nowKEVEPSS 66.62%Dec 11, 2025
- UnknownCVE-2025-55183 is named in an emergency Cloudflare managed-rules release.Check this weekEPSS 64.23%Dec 11, 2025
- Critical9.8Fortinet Multiple Products Improper Verification of Cryptographic Signature VulnerabilityPatch nowKEVEPSS 68.29%Dec 9, 2025
- Critical10.0Meta React Server Components Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.80%Dec 3, 2025
- Critical9.3monstaftp monsta_ftp Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 72.68%Nov 7, 2025
- Critical9.1An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8.Check this weekEPSS 19.26%Nov 5, 2025
- Critical9.8React Native Community CLI OS Command Injection VulnerabilityPatch nowKEVEPSS 93.98%Nov 3, 2025
- Critical9.8Oracle Fusion Middleware Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 88.65%Oct 21, 2025
- Critical9.8Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.98%Oct 14, 2025
- High7.5Oracle E-Business Suite Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 95.89%Oct 11, 2025
- Critical9.8Fortinet FortiWeb Path Traversal VulnerabilityPatch nowKEVEPSS 91.08%Oct 6, 2025
- UnknownCisco IOS XR Heap-based Buffer OverflowPatch nowKEVEPSS 6.92%Oct 6, 2025
- Critical9.8Oracle E-Business Suite Unspecified VulnerabilityPatch nowKEVEPSS 99.73%Oct 4, 2025
- UnknownDitty WordPress Plugin Unauthenticated Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 20.24%Sep 29, 2025
- High8.6Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization VulnerabilityPatch nowKEVEPSS 87.09%Sep 25, 2025
- Critical9.9Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow VulnerabilityPatch nowKEVEPSS 71.21%Sep 25, 2025
- UnknownCVE-2025-54914 is named in a Cloudflare managed-rules release.Check if you run itEPSS 2.51%Sep 22, 2025
- UnknownImproper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 20.42%Sep 22, 2025
- Critical10.0Fortra GoAnywhere MFT Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.80%Sep 18, 2025
- Critical9.8jinjava is a Java-based template engine based on django template syntax, adapted to render jinja templates.Check if you run itEPSS 2.11%Sep 17, 2025
- Critical9.8The cleanIptables mutation in Chaos Controller Manager is vulnerable to OS command injection.Check if you run itEPSS 3.38%Sep 15, 2025
- Critical9.8The killProcesses mutation in Chaos Controller Manager is vulnerable to OS command injection.Check if you run itEPSS 2.92%Sep 15, 2025
- Critical9.8The cleanTcs mutation in Chaos Controller Manager is vulnerable to OS command injection.Check if you run itEPSS 3.03%Sep 15, 2025
- High7.5The Chaos Controller Manager in Chaos Mesh exposes a GraphQL debugging server without authentication to the entire Kubernetes cluster, which provides an API to kill arbitrary proceCheck if you run itEPSS 0.81%Sep 15, 2025
Sort