Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVEPSS 0.3%Oct 9, 2026
- Unknownvisualcomposer visual_composer_website_builder Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')KEVEPSS 2.9%Oct 8, 2026
- UnknownExternal Control of File Name or PathKEVEPSS 0.9%Oct 7, 2026
- UnknownCritical Unauthenticated Arbitrary File Upload Vulnerability Exploited in Bricksforge PluginKEVEPSS 0.3%Oct 7, 2026
- Unknownkidocode crawl4ai Improper Control of Generation of Code ('Code Injection')KEVEPSS 6.0%Oct 7, 2026
- UnknownSonicWall security advisory (AV26-1017) – Update 1KEVEPSS 0.5%Oct 7, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVEPSS 0.2%Oct 6, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVEPSS 0.4%Oct 6, 2026
- Unknownwpclever wpc_product_bundles_for_woocommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVEPSS 0.2%Oct 6, 2026
- UnknownLangflow Langflow Improper Control of Generation of Code ('Code Injection')KEVEPSS 0.4%Oct 6, 2026
- Critical9.3CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian productsKEVOct 5, 2026
- UnknownD-Link dap-1360_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')KEVEPSS 2.1%Oct 5, 2026
- UnknownD-Link dap-1650_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')KEVEPSS 7.3%Oct 5, 2026
- Critical9.3Ahsay AhsayCBS Command Injection VulnerabilityKEVEPSS 4.8%Oct 4, 2026
- Medium5.5Ahsay AhsayCBS Improper Authentication VulnerabilityKEVEPSS 0.9%Oct 4, 2026
- UnknownUnrestricted Upload of File with Dangerous TypeKEVEPSS 0.3%Oct 4, 2026
- UnknownRejetto hfs2 Improper Neutralization of Special Elements Used in a Template EngineKEVEPSS 0.8%Oct 3, 2026
- High8.7Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityKEVEPSS 0.6%Oct 3, 2026
- Unknowngeminilabs site_reviews Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVEPSS 0.3%Oct 2, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVEPSS 1.0%Oct 2, 2026
- UnknownMelapress wp_activity_log Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVEPSS 0.3%Oct 2, 2026
- UnknownUnrestricted Upload of File with Dangerous TypeKEVEPSS 0.6%Oct 2, 2026
- UnknownServer-Side Request Forgery (SSRF)KEVEPSS 0.4%Oct 2, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVEPSS 0.5%Oct 2, 2026
- UnknownRejetto http_file_server Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)KEVEPSS 1.0%Oct 1, 2026