Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.2Out-of-Bounds Write in Google Brotli DecoderCheck this weekEPSS 32.78%Oct 22, 2026
- Critical9.2PHP PHP Use After FreePatch nowKEVEPSS 100.00%Oct 21, 2026
- Critical9.2PHP PHP Use After FreePatch nowKEVEPSS 99.98%Oct 21, 2026
- Critical9.3TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web.Check if you run itEPSS 0.54%Oct 12, 2026
- UnknownCVE-2026-94543 is named in a Cloudflare managed-rules release.Check if you run itEPSS 0.51%Oct 6, 2026
- Critical9.3CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian productsPatch nowKEVEPSS 99.48%Oct 5, 2026
- Critical9.5Citrix NetScaler Improper Input Validation VulnerabilityPatch nowKEVEPSS 82.16%Sep 27, 2026
- Critical9.3F5 BIG-IP APM Heap-based Buffer Overflow VulnerabilityPatch nowKEVEPSS 24.94%Sep 22, 2026
- High8.1WordPress Core Remote File Inclusion VulnerabilityPatch nowKEVEPSS 95.77%Sep 22, 2026
- Critical10.0GitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityPatch nowKEVEPSS 97.36%Sep 11, 2026
- UnknownCVE-2026-75604 is named in a Cloudflare managed-rules release.Check if you run itEPSS 2.10%Sep 8, 2026
- Critical10.0Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityPatch nowKEVEPSS 3.95%Sep 7, 2026
- Critical9.8JFrog Artifactory Improper Authentication VulnerabilityPatch nowKEVEPSS 14.37%Aug 28, 2026
- UnknownCVE-2026-65640 is named in a Cloudflare managed-rules release.Check if you run itEPSS 1.94%Aug 17, 2026
- High7.5JFrog Artifactory Improper Authentication VulnerabilityPatch nowKEVEPSS 9.80%Aug 12, 2026
- UnknownCVE-2019-17132 is named in a Cloudflare managed-rules release.Check this weekEPSS 11.83%Aug 11, 2026
- UnknownCVE-2026-64638 is listed by WordPress 7.0.3 Released: 12 Vulnerabilities Found and Fixed.Check if you run itEPSS 0.89%Aug 6, 2026
- UnknownRapid7 Analysis: KindaRails2Shell (CVE-2026-66066)Patch nowKEVEPSS 26.52%Aug 3, 2026
- Critical9.3vBulletin vBulletin Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 5.61%Jul 27, 2026
- UnknownCVE-2026-64649 is named in a Cloudflare managed-rules release.Check if you run itEPSS 0.46%Jul 21, 2026
- UnknownCVE-2026-64646 is named in a Cloudflare managed-rules release.Check if you run itEPSS 0.52%Jul 21, 2026
- UnknownCVE-2026-64645 is named in a Cloudflare managed-rules release.Check if you run itEPSS 0.41%Jul 21, 2026
- UnknownCVE-2026-64644 is named in a Cloudflare managed-rules release.Check if you run itEPSS 0.67%Jul 21, 2026
- UnknownCVE-2026-64643 is named in a Cloudflare managed-rules release.Check if you run itEPSS 0.51%Jul 21, 2026
- UnknownCVE-2026-64642 is named in a Cloudflare managed-rules release.Check if you run itEPSS 0.64%Jul 21, 2026
Sort