Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownPalo Alto Networks Expedition Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 78.53%Jun 25, 2025
- Unknownvendure vendure Improper Input ValidationPatch nowKEVEPSS 60.42%Jun 25, 2025
- UnknownSolarWinds security_event_manager Deserialization of Untrusted DataPatch nowKEVEPSS 92.25%Jun 25, 2025
- Critical10.0Quest KACE Systems Management Appliance (SMA) Improper Authentication VulnerabilityPatch nowKEVEPSS 2.49%Jun 24, 2025
- Unknownnavidrome navidrome Improper AuthenticationPatch nowKEVEPSS 0.98%Jun 24, 2025
- Critical9.8os4ed opensis Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.95%Jun 24, 2025
- Unknownalibaba fastjson Inclusion of Functionality from Untrusted Control SpherePatch nowKEVEPSS 0.76%Jun 23, 2025
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilityPatch nowKEVEPSS 1.71%Jun 23, 2025
- UnknownSymantec endpoint_detection_and_response Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 7.49%Jun 23, 2025
- Critical10.0Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 15.40%Jun 23, 2025
- Critical10.0Yonyou ufida-nc Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.56%Jun 23, 2025
- High8.7Weaver e-cology Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.12%Jun 23, 2025
- UnknownLinksys e1000 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 92.77%Jun 23, 2025
- UnknownTVT td-2108ts-cl_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 30.91%Jun 23, 2025
- Unknownengeniustech esr300_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 22.81%Jun 23, 2025
- Unknown5vtechnologies blue_angel_software_suite Use of Hard-coded CredentialsPatch nowKEVEPSS 0.66%Jun 23, 2025
- Unknown5vtechnologies blue_angel_software_suite Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 11.30%Jun 23, 2025
- Medium5.1geoffrowland jmol Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.78%Jun 23, 2025
- High8.7geoffrowland jmol Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.06%Jun 23, 2025
- UnknownStrapi Strapi Improper AuthenticationPatch nowKEVEPSS 4.12%Jun 23, 2025
- Unknownfit2cloud kubepi Use of Hard-coded CredentialsPatch nowKEVEPSS 69.67%Jun 23, 2025
- Unknowndedecms dedecms Path Traversal: '..\filedir'Patch nowKEVEPSS 2.41%Jun 23, 2025
- Unknownfasterxml jackson-databind Deserialization of Untrusted DataPatch nowKEVEPSS 18.92%Jun 23, 2025
- Unknownfasterxml jackson-databind Deserialization of Untrusted DataPatch nowKEVEPSS 18.38%Jun 23, 2025
- Unknowndebian debian_linux Deserialization of Untrusted DataPatch nowKEVEPSS 3.47%Jun 23, 2025