Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the Administrator password reset mechanism is mishandled.Check if you run itEPSS 1.92%Jul 5, 2025
- Critical10.0Cisco Identity Services Engine Injection VulnerabilityPatch nowKEVEPSS 97.60%Jun 25, 2025
- Critical10.0Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 15.40%Jun 23, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 52.19%Jun 20, 2025
- High8.8Sitecore experience_commerce Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 30.45%Jun 17, 2025
- High8.8Sitecore experience_commerce Relative Path TraversalPatch nowKEVEPSS 24.83%Jun 17, 2025
- High7.5Sitecore experience_commerce Use of Hard-coded CredentialsPatch nowKEVEPSS 55.87%Jun 17, 2025
- Critical9.3Citrix NetScaler ADC and Gateway Out-of-Bounds Read VulnerabilityPatch nowKEVEPSS 99.97%Jun 17, 2025
- UnknownCVE-2024-39338 is named in a Cloudflare managed-rules release.Check if you run itEPSS 1.21%Jun 16, 2025
- UnknownCisco ios_xe Use of Hard-coded CredentialsPatch nowKEVEPSS 27.49%Jun 10, 2025
- UnknownCVE-2024-46986 is named in a Cloudflare managed-rules release.Check this weekEPSS 40.96%Jun 9, 2025
- UnknownKentico Xperience CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 60.59%Jun 7, 2025
- UnknownCVE-2024-7591 is named in a Cloudflare managed-rules release.Check this weekEPSS 39.18%Jun 2, 2025
- UnknownCVE-2024-0759 is named in a Cloudflare managed-rules release.Check if you run itEPSS 0.92%Jun 2, 2025
- High8.8RoundCube Webmail Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.71%Jun 1, 2025
- UnknownCVE-2025-32421 is named in a Cloudflare managed-rules release.Check if you run itEPSS 0.80%May 27, 2025
- UnknownCVE-2024-15077 is named in a Cloudflare managed-rules release.Open the advisoryMay 27, 2025
- Critical9.0vBulletin vBulletin Improper Protection of Alternate PathPatch nowKEVEPSS 57.30%May 26, 2025
- Critical10.0vBulletin vBulletin Improper Protection of Alternate PathPatch nowKEVEPSS 75.64%May 26, 2025
- High7.2infoblox netmri Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 43.28%May 22, 2025
- Critical10.0versa-networks concerto Time-of-check Time-of-use (TOCTOU) Race ConditionPatch nowKEVEPSS 46.10%May 21, 2025
- Critical9.2Versa Concerto Improper Authentication VulnerabilityPatch nowKEVEPSS 81.78%May 21, 2025
- Critical10.0Unrestricted Upload of File with Dangerous Type vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows Upload a Web Shell to a Web Server.This issCheck if you run itEPSS 4.56%May 19, 2025
- Critical9.8Unverified Password ChangePatch nowKEVEPSS 15.20%May 19, 2025
- UnknownCVE-2025-27520 is named in a Cloudflare managed-rules release.Check this weekEPSS 40.62%May 19, 2025
Sort