Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Critical9.8Fortinet FortiMail Path Traversal VulnerabilityKEVEPSS 2.2%Oct 1, 2026
- Unknownstreamax streamax_crocus Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVEPSS 0.9%Oct 1, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVEPSS 0.8%Oct 1, 2026
- Unknownicewarp icewarp_server URL Redirection to Untrusted Site ('Open Redirect')KEVEPSS 1.6%Oct 1, 2026
- Critical9.8Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityKEVEPSS 1.8%Sep 30, 2026
- Critical9.4Zammad GmbH Zammad Improper Privilege Management VulnerabilityKEVEPSS 0.5%Sep 30, 2026
- Critical9.4Zammad GmbH Zammad Session Fixation VulnerabilityKEVEPSS 1.3%Sep 30, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVEPSS 0.6%Sep 30, 2026
- Unknownpalletsprojects werkzeug Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVEPSS 0.8%Sep 30, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVEPSS 0.5%Sep 30, 2026
- UnknownServer-Side Request Forgery (SSRF)KEVEPSS 0.4%Sep 30, 2026
- Unknown74cms 74cms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVEPSS 8.6%Sep 30, 2026
- UnknownExternal Control of File Name or PathKEVEPSS 1.0%Sep 29, 2026
- Unknowns2member s2member Improper Control of Generation of Code ('Code Injection')KEVEPSS 0.4%Sep 29, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVEPSS 0.5%Sep 29, 2026
- UnknownApache OFBiz Exposure of Sensitive Information to an Unauthorized ActorKEVEPSS 25.7%Sep 29, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVEPSS 0.5%Sep 29, 2026
- High8.8Apple Multiple Products Out-of-Bounds Write VulnerabilityKEVEPSS 1.2%Sep 28, 2026
- UnknownUnrestricted Upload of File with Dangerous TypeKEVEPSS 1.7%Sep 28, 2026
- Critical9.5Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityKEVEPSS 1.3%Sep 27, 2026
- Critical9.5Citrix NetScaler Improper Input Validation VulnerabilityKEVEPSS 1.1%Sep 27, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')KEVEPSS 0.9%Sep 27, 2026
- UnknownTenda ac20_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')KEVEPSS 16.7%Sep 27, 2026
- Unknownbplugins html5_video_player Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVEPSS 2.6%Sep 27, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVEPSS 0.2%Sep 25, 2026