Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3Weaver e-office Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.77%Apr 30, 2026
- High8.7Weaver e-cology Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.70%Apr 30, 2026
- Critical9.2opencats opencats Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 3.43%Apr 28, 2026
- Critical9.3WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 98.53%Apr 28, 2026
- Critical10.0Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Apache Camel Camel-Coap component.Patch nowKEVEPSS 7.16%Apr 27, 2026
- Critical9.3BerriAI LiteLLM SQL Injection VulnerabilityPatch nowKEVEPSS 5.77%Apr 27, 2026
- UnknownQinglong Case-sensitive Path Matching Authentication BypassPatch nowKEVApr 26, 2026
- High7.5Linux Kernel 'rxgk' Local Privilege EscalationPatch nowKEVEPSS 0.63%Apr 24, 2026
- Medium5.3Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.73%Apr 23, 2026
- Critical10.0Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business.Patch nowKEVEPSS 7.36%Apr 23, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.33%Apr 23, 2026
- Unknownmailerlite mailerlite Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.44%Apr 23, 2026
- Critical9.3ThinkPHP ThinkPHP Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 0.89%Apr 22, 2026
- Critical9.3IBM collaborative_lifecycle_management Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.65%Apr 21, 2026
- High8.1The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file upload in versions up to, and including, 1.3.9.7.Patch nowKEVEPSS 3.46%Apr 17, 2026
- High7.2The WP Statistics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'utm_source' parameter in all versions up to, and including, 14.16.4.Patch nowKEVEPSS 0.42%Apr 17, 2026
- Critical10.0Improper Access ControlPatch nowKEVEPSS 1.17%Apr 16, 2026
- UnknownMissing Authentication for Critical FunctionPatch nowKEVEPSS 1.30%Apr 15, 2026
- High7.8Microsoft Defender Insufficient Granularity of Access Control VulnerabilityPatch nowKEVEPSS 0.40%Apr 14, 2026
- Critical9.8Microsoft Internet Key Exchange (IKE) Service Extensions Double Free VulnerabilityPatch nowKEVEPSS 1.62%Apr 14, 2026
- Critical9.8Fortinet FortiSandbox OS Command Injection VulnerabilityPatch nowKEVEPSS 47.36%Apr 14, 2026
- Medium4.3Microsoft Windows Protection Mechanism Failure VulnerabilityPatch nowKEVEPSS 4.90%Apr 14, 2026
- Medium6.5Microsoft SharePoint Server Improper Input Validation VulnerabilityPatch nowKEVEPSS 43.38%Apr 12, 2026
- Medium6.5Arcane is an interface for managing Docker containers, images, networks, and volumes.Patch nowKEVEPSS 0.72%Apr 10, 2026
- High8.8LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.Patch nowKEVEPSS 3.40%Apr 10, 2026
Sort