Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknowncodeworx_technologies dcp-portal Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.86%Nov 10, 2025
- UnknownImproper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 1.54%Nov 7, 2025
- Unknowndigitalzoomstudio zoomsounds Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 5.39%Nov 7, 2025
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.62%Nov 7, 2025
- High8.6Sangoma FreePBX OS Command Injection VulnerabilityPatch nowKEVEPSS 84.62%Nov 6, 2025
- High8.8Apple Multiple products Use-After-Free VulnerabilityPatch nowKEVEPSS 4.04%Nov 5, 2025
- Unknownmeowapps ai_engine Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 74.83%Nov 5, 2025
- UnknownMoodle moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.13%Nov 5, 2025
- UnknownAtlassian Confluence Server and Data Center Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 38.84%Nov 5, 2025
- Unknownthinkcmf thinkcmf Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 7.42%Nov 5, 2025
- Critical9.8React Native Community CLI OS Command Injection VulnerabilityPatch nowKEVEPSS 93.98%Nov 3, 2025
- UnknownXWiki xwiki Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 87.90%Nov 3, 2025
- UnknownWPExperts post_smtp Missing AuthorizationPatch nowKEVEPSS 61.48%Nov 1, 2025
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 9.61%Oct 31, 2025
- UnknownXWiki xwiki Relative Path TraversalPatch nowKEVEPSS 1.77%Oct 31, 2025
- Unknownnootheme jobmonster Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.80%Oct 31, 2025
- UnknownApache Solr Improper AuthenticationPatch nowKEVEPSS 92.75%Oct 31, 2025
- UnknownJEECG jeecg Incorrect Permission Assignment for Critical ResourcePatch nowKEVEPSS 3.52%Oct 31, 2025
- UnknownMicrosoft Windows User Interface (UI) Misrepresentation of Critical InformationPatch nowKEVEPSS 73.03%Oct 30, 2025
- Unknownkubernetes operations Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.40%Oct 30, 2025
- Unknownseeyon zhiyuan_oa_web_application_system Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.49%Oct 30, 2025
- UnknownLinksys re6500_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.69%Oct 30, 2025
- UnknownLiteSpeed Technologies LiteSpeed Cache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.38%Oct 29, 2025
- Unknownanti-malware_security_and_brute-force_firewall_project anti-malware_security_and_brute-force_firewall Missing AuthorizationPatch nowKEVEPSS 0.46%Oct 29, 2025
- UnknownTOTOLINK a3002ru Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.90%Oct 29, 2025