Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownwpmanageninja ninja_tables Embedded Malicious CodePatch nowKEVEPSS 0.65%Aug 1, 2026
- UnknownEmbedded Malicious CodePatch nowKEVEPSS 0.67%Aug 1, 2026
- UnknownAdobe ColdFusion Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.95%Aug 1, 2026
- High8.2N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 7.88%Aug 1, 2026
- High7.5Zephyr's IPv6 forwarding path re-sent routed unicast packets without ever decrementing the IPv6 hop limit.Check if you run itEPSS 0.52%Jul 31, 2026
- High7.5A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux.Check if you run itEPSS 0.66%Jul 31, 2026
- Low3.8Stores can mix up type indices between enginesCheck if you run itEPSS 0.09%Jul 31, 2026
- High7.5A stack-based buffer overflow vulnerability in the upload functionality could allow an authenticated attacker to achieve code execution.Check if you run itEPSS 0.49%Jul 31, 2026
- High8.6A command injection vulnerability in the firmware upgrade file verification process could allow an attacker to execute arbitrary commands.Check if you run itEPSS 2.51%Jul 31, 2026
- Critical9.2A stack-based buffer overflow vulnerability in the Cookie parsing methods could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabCheck if you run itEPSS 0.64%Jul 31, 2026
- Critical9.2A stack-based buffer overflow vulnerability in the log message functionality could allow an unauthenticated attacker to achieve code execution.Check if you run itEPSS 0.64%Jul 31, 2026
- Critical9.2A stack-based buffer overflow vulnerability in the password functionality could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabCheck if you run itEPSS 0.64%Jul 31, 2026
- Critical9.8Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in /show_price_by_pdtId.php.Check if you run itEPSS 0.39%Jul 30, 2026
- Low2.7VMware cloud_foundation Insufficient LoggingPatch nowKEVEPSS 0.76%Jul 30, 2026
- Critical9.8Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)Patch nowKEVEPSS 0.61%Jul 30, 2026
- UnknownCVE-2026-18072 is listed by Protect The Shire solves one problem, but risks making another worse.Check if you run itEPSS 2.98%Jul 30, 2026
- UnknownCVE-2026-15000 is listed by Protect The Shire solves one problem, but risks making another worse.Check if you run itEPSS 0.59%Jul 30, 2026
- Critical9.8Broadcom VMware vCenter Path Traversal VulnerabilityPatch nowKEVEPSS 2.56%Jul 30, 2026
- Medium5.3ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.21%Jul 30, 2026
- Medium5.0ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.13%Jul 30, 2026
- UnknownJenkins git Missing AuthorizationPatch nowKEVEPSS 7.00%Jul 30, 2026
- UnknownMicrosoft Windows Group Policy Elevation of Privilege VulnerabilityPatch nowKEVEPSS 6.40%Jul 30, 2026
- Medium5.6IBM SPSS Modeler: Schwachstelle ermöglicht Manipulation von DateienCheck if you run itEPSS 0.29%Jul 29, 2026
- UnknownHCSEC-2026-24 - Multiple vulnerabilities impacting HashiCorp Consul MCP ServerCheck if you run itEPSS 0.39%Jul 29, 2026
- High7.8posix-cpu-timers: Prevent UAF caused by non-leader exec() raceCheck if you run itEPSS 0.50%Jul 29, 2026
Sort