Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0invisioncommunity invisioncommunity Improper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 84.32%May 16, 2025
- High8.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityPatch nowKEVEPSS 88.00%May 13, 2025
- Critical9.8Fortinet Multiple Products Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 30.94%May 13, 2025
- High8.5When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command which may allow an authenticated attacCheck this weekEPSS 24.30%May 7, 2025
- High7.1A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command arguments to upload a file on the aCheck this weekEPSS 22.24%May 7, 2025
- High8.8SonicWall SMA 100 Appliances Files or Directories Accessible to External PartiesPatch nowKEVEPSS 6.45%May 7, 2025
- UnknownCVE-2025-31489 is named in a Cloudflare managed-rules release.Check if you run itEPSS 2.47%May 5, 2025
- UnknownCVE-2021-20042 is named in a Cloudflare managed-rules release.Check if you run itEPSS 3.68%May 5, 2025
- UnknownCVE-2021-20041 is named in a Cloudflare managed-rules release.Check this weekEPSS 21.20%May 5, 2025
- UnknownCVE-2021-20040 is named in a Cloudflare managed-rules release.Check this weekEPSS 25.15%May 5, 2025
- Critical9.8SureTriggers suretriggers Incorrect Privilege AssignmentPatch nowKEVEPSS 54.19%Apr 30, 2025
- High7.5Improper Input Validation vulnerability in Apache Tomcat.Check this weekEPSS 61.32%Apr 28, 2025
- Unknownvitejs vite Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 74.77%Apr 28, 2025
- Critical9.1SAP NetWeaver Deserialization VulnerabilityPatch nowKEVEPSS 12.85%Apr 27, 2025
- High8.2React Router is a router for React.Check if you run itEPSS 0.80%Apr 25, 2025
- High7.5React Router is a router for React.Check this weekEPSS 20.47%Apr 25, 2025
- Critical9.3Commvault Command Center Path Traversal VulnerabilityPatch nowKEVEPSS 97.60%Apr 22, 2025
- Critical10.0SAP NetWeaver Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 99.49%Apr 22, 2025
- UnknownCVE-2025-20229 is named in a Cloudflare managed-rules release.Check this weekEPSS 16.02%Apr 22, 2025
- UnknownCVE-2023-22047 is named in a Cloudflare managed-rules release.Check this weekEPSS 76.98%Apr 22, 2025
- Critical10.0Craft CMS Code Injection VulnerabilityPatch nowKEVEPSS 99.79%Apr 18, 2025
- Medium5.0CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows directory traversal via the /WebInterface/function/ URI to read files accessible by SMB at UNC share pathnames,Check this weekEPSS 18.09%Apr 15, 2025
- Critical9.8Langflow Missing Authentication VulnerabilityPatch nowKEVEPSS 99.99%Apr 7, 2025
- Critical9.8Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.98%Apr 3, 2025
- UnknownApache camel Improper Neutralization of Internal Special ElementsPatch nowKEVEPSS 76.09%Apr 2, 2025
Sort