Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Vite Vitejs Improper Access Control VulnerabilityPatch nowKEVEPSS 65.76%Mar 31, 2025
- Unknownvercel next.js Improper AuthorizationPatch nowKEVEPSS 99.22%Mar 28, 2025
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 65.00%Mar 27, 2025
- Critical9.8Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 97.17%Mar 24, 2025
- Unknownkubernetes ingress-nginx Improper Isolation or CompartmentalizationPatch nowKEVEPSS 99.40%Mar 23, 2025
- Unknowningress-nginx controller configuration injection via unsanitized mirror annotationsCheck this weekEPSS 86.15%Mar 23, 2025
- UnknownSitecore Experience Platform , Manager, and Commerce Unauthenticated Arbitrary File ReadPatch nowKEVEPSS 46.77%Mar 17, 2025
- UnknownCVE-2024-23666 is named in a Cloudflare managed-rules release.Check if you run itEPSS 2.73%Mar 17, 2025
- UnknownCVE-2023-42791 is named in a Cloudflare managed-rules release.Check if you run itEPSS 3.99%Mar 17, 2025
- UnknownCVE-2023-33160 is named in a Cloudflare managed-rules release.Check if you run itEPSS 4.32%Mar 17, 2025
- High8.6tj-actions/changed-files GitHub Action Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 72.09%Mar 14, 2025
- UnknownApache camel Improper Handling of Case SensitivityPatch nowKEVEPSS 97.06%Mar 11, 2025
- Critical9.8Apache Tomcat Path Equivalence VulnerabilityPatch nowKEVEPSS 99.94%Mar 10, 2025
- High8.6NAKIVO Backup and Replication Absolute Path Traversal VulnerabilityPatch nowKEVEPSS 94.36%Mar 4, 2025
- Critical9.8XWiki Platform Eval Injection VulnerabilityPatch nowKEVEPSS 99.97%Feb 20, 2025
- High7.3Yeti Server Side Template Injection VulnerabilityPatch nowKEVEPSS 3.92%Feb 18, 2025
- High8.8Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityPatch nowKEVEPSS 98.14%Feb 12, 2025
- Unknowniptanus wordpress_file_upload Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 93.34%Feb 11, 2025
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 33.16%Feb 11, 2025
- Unknownvercel next.js Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 59.18%Feb 11, 2025
- UnknownCVE-2024-12105 is named in a Cloudflare managed-rules release.Check this weekEPSS 41.68%Feb 11, 2025
- Critical9.9Wazuh Server Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 93.84%Feb 10, 2025
- High7.5SimpleHelp Path Traversal VulnerabilityPatch nowKEVEPSS 96.83%Jan 15, 2025
- High7.5Ivanti Endpoint Manager (EPM) Absolute Path Traversal VulnerabilityPatch nowKEVEPSS 89.81%Jan 14, 2025
- High7.5Ivanti Endpoint Manager (EPM) Absolute Path Traversal VulnerabilityPatch nowKEVEPSS 90.98%Jan 14, 2025
Sort