Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.52%Aug 5, 2026
- Unknownkaliforms contact_form_builder Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.19%Aug 5, 2026
- Critical9.2FlowiseAI Flowise Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.60%Aug 4, 2026
- UnknownDeserialization of Untrusted DataPatch nowKEVEPSS 0.56%Aug 4, 2026
- Medium6.9Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and AWS CLI v2 before 2.35.3 might allow man-in-the-middle a…Check if you run itEPSS 0.46%Aug 3, 2026
- UnknownRapid7 Analysis: KindaRails2Shell (CVE-2026-66066)Patch nowKEVEPSS 30.07%Aug 3, 2026
- High7.1NLTK: Missing Post-Download Integrity Verification Allows Malicious Package InjectionCheck if you run itEPSS 0.10%Aug 3, 2026
- Medium6.2In Telephony, there is a possible information disclosure due to a missing permission check.Check if you run itEPSS 0.17%Aug 3, 2026
- Medium6.0In trusted_mem, there is a possible escalation of privilege due to improper input validation.Check if you run itEPSS 0.16%Aug 3, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.58%Aug 3, 2026
- Unknownb3log siyuan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.17%Aug 3, 2026
- High8.2N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 14.62%Aug 2, 2026
- Unknownwpmanageninja ninja_tables Embedded Malicious CodePatch nowKEVEPSS 0.65%Aug 1, 2026
- UnknownEmbedded Malicious CodePatch nowKEVEPSS 0.67%Aug 1, 2026
- UnknownAdobe ColdFusion Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.95%Aug 1, 2026
- High8.2N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 7.88%Aug 1, 2026
- High7.5Zephyr's IPv6 forwarding path re-sent routed unicast packets without ever decrementing the IPv6 hop limit.Check if you run itEPSS 0.52%Jul 31, 2026
- High7.5A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux.Check if you run itEPSS 0.66%Jul 31, 2026
- Low3.8Stores can mix up type indices between enginesCheck if you run itEPSS 0.09%Jul 31, 2026
- High7.5A stack-based buffer overflow vulnerability in the upload functionality could allow an authenticated attacker to achieve code execution.Check if you run itEPSS 0.49%Jul 31, 2026
- High8.6A command injection vulnerability in the firmware upgrade file verification process could allow an attacker to execute arbitrary commands.Check if you run itEPSS 2.51%Jul 31, 2026
- Critical9.2A stack-based buffer overflow vulnerability in the Cookie parsing methods could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabCheck if you run itEPSS 0.64%Jul 31, 2026
- Critical9.2A stack-based buffer overflow vulnerability in the log message functionality could allow an unauthenticated attacker to achieve code execution.Check if you run itEPSS 0.64%Jul 31, 2026
- Critical9.2A stack-based buffer overflow vulnerability in the password functionality could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabCheck if you run itEPSS 0.64%Jul 31, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVJul 31, 2026
Sort