Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low2.0A vulnerability was determined in PluXml up to 5.8.22.Jan 2, 2026
- Medium6.3Improper Input Validation vulnerability in qs (parse modules) allows HTTP DoS.This issue affects qs: < 6.14.1.Dec 29, 2025
- Critical10.0Cisco Multiple Products Improper Input Validation VulnerabilityKEVEPSS 32.4%Dec 17, 2025
- High7.4FreshRSS is a self-hosted RSS feed aggregator.Dec 16, 2025
- High7.5A flaw was found in Undertow that can cause remote denial of service attacks.Dec 3, 2025
- Critical9.1Adobe Commerce and Magento Improper Input Validation VulnerabilityKEVEPSS 94.5%Sep 9, 2025
- Critical9.4N-able N-Central Command Injection VulnerabilityKEVEPSS 3.4%Aug 13, 2025
- High8.8Google Chromium ANGLE and GPU Improper Input Validation VulnerabilityKEVEPSS 9.5%Jul 15, 2025
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow VulnerabilityKEVEPSS 2.3%May 13, 2025
- High8.8Microsoft Project Remote Code Execution VulnerabilityKEVEPSS 8.2%Aug 13, 2024
- High8.8Microsoft Windows MSHTML Platform Security Feature Bypass VulnerabilityKEVEPSS 3.9%May 14, 2024
- Critical10.0Palo Alto Networks PAN-OS Command Injection VulnerabilityKEVEPSS 100.0%Apr 12, 2024
- Critical9.8Microsoft Outlook Improper Input Validation VulnerabilityKEVEPSS 94.7%Feb 13, 2024
- Medium5.5Microsoft WordPad Information Disclosure VulnerabilityKEVEPSS 20.3%Oct 10, 2023
- Critical9.8Atlassian Confluence Data Center and Server Broken Access Control VulnerabilityKEVEPSS 99.2%Oct 4, 2023
- Medium6.5Microsoft Word Information Disclosure VulnerabilityKEVEPSS 19.6%Sep 12, 2023
- High7.8Apple iOS, iPadOS, and watchOS Wallet Code Execution VulnerabilityKEVEPSS 4.4%Sep 7, 2023
- Medium6.5Qlik Sense Path Traversal VulnerabilityKEVEPSS 84.8%Aug 29, 2023
- Critical9.8Barracuda Networks ESG Appliance Improper Input Validation VulnerabilityKEVEPSS 87.7%May 24, 2023
- Critical9.8Microsoft Office Outlook Privilege Escalation VulnerabilityKEVEPSS 97.2%Mar 14, 2023
- Critical9.8Zoho ManageEngine Multiple Products Remote Code Execution VulnerabilityKEVEPSS 99.8%Jan 18, 2023
- High8.8Multiple SugarCRM Products Remote Code Execution VulnerabilityKEVEPSS 80.1%Jan 11, 2023
- High7.8Apple iOS and iPadOS Out-of-Bounds Write VulnerabilityKEVEPSS 1.1%Oct 25, 2022
- Low3.7When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make t…Sep 23, 2022
- Medium6.1Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) VulnerabilityKEVEPSS 46.4%Sep 21, 2022