Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8D-Link dir-868l_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.97%Aug 28, 2025
- Unknownhongdian h8922 Direct Request ('Forced Browsing')Patch nowKEVEPSS 2.79%Aug 23, 2025
- Unknownlangchain langchain Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 47.63%Aug 20, 2025
- Unknowntitool printmonitor Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 11.29%Aug 19, 2025
- Unknowngurock testrail Direct Request ('Forced Browsing')Patch nowKEVEPSS 47.49%Aug 18, 2025
- Unknownossrs simple_realtime_server Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 8.69%Aug 17, 2025
- Critical9.0CWP Control Web Panel OS Command Injection VulnerabilityPatch nowKEVEPSS 99.66%Aug 15, 2025
- Critical9.8FlowiseAI Flowise Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 22.37%Aug 14, 2025
- Unknownshibboleth xmltooling Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 2.89%Aug 12, 2025
- High8.6stirlingpdf stirling_pdf Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 2.00%Aug 11, 2025
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 23.46%Aug 11, 2025
- UnknownUse of Weak CredentialsPatch nowKEVEPSS 15.83%Aug 6, 2025
- Unknownlylme lylme_spage Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.44%Aug 1, 2025
- UnknownOSGeo GeoServer Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 2.30%Jul 31, 2025
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.66%Jul 23, 2025
- Unknownerudika scoold Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 1.03%Jul 17, 2025
- Critical10.0Cisco Identity Services Engine Injection VulnerabilityPatch nowKEVEPSS 74.50%Jul 16, 2025
- UnknownZyxel emg3525-t50b_firmware Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 0.65%Jul 16, 2025
- Critical9.3Missing Authentication for Critical FunctionPatch nowKEVEPSS 1.01%Jul 14, 2025
- UnknownRed Hat JBoss Application Server Improper AuthenticationPatch nowKEVEPSS 2.94%Jul 14, 2025
- Medium5.3Liferay digital_experience_platform Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.43%Jul 13, 2025
- Unknownhorizontcms_project horizontcms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 18.46%Jul 13, 2025
- Critical9.8Fortinet FortiWeb SQL Injection VulnerabilityPatch nowKEVEPSS 99.92%Jul 11, 2025
- Unknownpluginrx broken_link_notifier Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.72%Jul 10, 2025
- UnknownInsertion of Sensitive Information into Externally-Accessible File or DirectoryPatch nowKEVEPSS 46.63%Jul 9, 2025
Sort