Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknowncode-atlantic popup_maker Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 9.43%Jun 23, 2025
- UnknownIchano AtHome IP Camera Port 1300 Arbitrary Command ExecutionPatch nowKEVEPSS 7.50%Jun 23, 2025
- Medium6.9fabian school_fees_payment_system Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 2.00%Jun 21, 2025
- High8.6dnnsoftware DotNetNuke (DNN) Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 35.76%Jun 21, 2025
- High7.8RARLAB WinRAR Path Traversal VulnerabilityPatch nowKEVEPSS 90.48%Jun 20, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 52.47%Jun 20, 2025
- Critical9.4Edimax ew-7438rpn_mini_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.42%Jun 20, 2025
- Critical9.4Edimax ew-7438rpn_mini_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.81%Jun 20, 2025
- High8.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.56%Jun 20, 2025
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.79%Jun 20, 2025
- UnknownImproper Input ValidationPatch nowKEVEPSS 0.60%Jun 20, 2025
- Critical9.3minidvblinux minidvblinux Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 5.55%Jun 20, 2025
- Unknownaviatrix controller Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.57%Jun 20, 2025
- Critical9.3SugarCRM sugarcrm Deserialization of Untrusted DataPatch nowKEVEPSS 4.96%Jun 20, 2025
- High7.0GNU grub2 Execution with Unnecessary PrivilegesPatch nowKEVEPSS 0.47%Jun 19, 2025
- Unknownpterodactyl panel Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 54.46%Jun 19, 2025
- UnknownFunnelKit funnelkit_automations Missing AuthorizationPatch nowKEVEPSS 3.35%Jun 18, 2025
- Unknownwisecleaner wise_force_deleter Improper Access ControlPatch nowKEVEPSS 0.51%Jun 18, 2025
- UnknownZemana Watchdog Anti-Malware amsdk.sys Kernel Mode Driver Arbitrary Code InjectionPatch nowKEVEPSS 0.56%Jun 18, 2025
- High8.8Sitecore experience_commerce Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 29.81%Jun 17, 2025
- High8.8Sitecore experience_commerce Relative Path TraversalPatch nowKEVEPSS 24.30%Jun 17, 2025
- High7.5Sitecore experience_commerce Use of Hard-coded CredentialsPatch nowKEVEPSS 55.87%Jun 17, 2025
- Critical9.3Citrix NetScaler ADC and Gateway Out-of-Bounds Read VulnerabilityPatch nowKEVEPSS 99.97%Jun 17, 2025
- High8.1CodeDropz drag_and_drop_multiple_file_upload_-_contact_form_7 Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 6.03%Jun 17, 2025
- UnknownQualcomm ar8035_firmware Improper Validation of Array IndexPatch nowKEVEPSS 0.58%Jun 17, 2025