Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.4Flyto2 Core is an execution kernel for automation and AI-agent workflows.Patch nowKEVEPSS 0.26%Jul 6, 2026
- High7.8Linux Kernel Unspecified VulnerabilityPatch nowKEVEPSS 0.71%Jul 4, 2026
- UnknownFlowiseAI Flowise External Control of File Name or PathPatch nowKEVEPSS 4.36%Jul 3, 2026
- Unknowncreativethemes blocksy_companion Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.57%Jul 2, 2026
- UnknownD-Link dir-823x_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 15.74%Jul 2, 2026
- UnknownIvanti automation SQL Injection: HibernatePatch nowKEVEPSS 0.90%Jul 2, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.28%Jul 2, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.52%Jul 2, 2026
- UnknownQuantumCloud wpbot Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.89%Jul 1, 2026
- Critical9.9Langflow Langflow Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.07%Jun 30, 2026
- Critical10.0Kestra kestra Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 3.30%Jun 26, 2026
- Critical10.0Kestra OSS OS Command Injection VulnerabilityPatch nowKEVEPSS 2.10%Jun 26, 2026
- UnknownGogs Gogs Relative Path TraversalPatch nowKEVEPSS 1.11%Jun 26, 2026
- High8.7FlowiseAI Flowise External Control of File Name or PathPatch nowKEVEPSS 1.57%Jun 25, 2026
- Unknownfossbilling fossbilling Improper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 1.91%Jun 25, 2026
- Critical9.3Langflow Langflow Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.19%Jun 23, 2026
- High8.4Langflow Authorization Bypass Through User-Controlled Key VulnerabilityPatch nowKEVEPSS 0.89%Jun 23, 2026
- Critical10.0iCagenda Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 20.07%Jun 20, 2026
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.94%Jun 19, 2026
- High7.8Linux Kernel Integer Overflow or WraparoundPatch nowKEVEPSS 0.58%Jun 16, 2026
- Critical10.0JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 88.51%Jun 15, 2026
- Critical9.5SimpleHelp Authentication Bypass VulnerabilityPatch nowKEVEPSS 5.72%Jun 12, 2026
- Unknownslicewp affiliate_program_suite Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Jun 11, 2026
- Critical9.8Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 96.68%Jun 10, 2026
- Critical10.0Ivanti Sentry OS Command Injection VulnerabilityPatch nowKEVEPSS 99.91%Jun 9, 2026
Sort