Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High8.8Apache ActiveMQ Improper Input Validation VulnerabilityKEVEPSS 15.5%Apr 7, 2026
- High8.6Adobe Acrobat and Reader Prototype Pollution VulnerabilityKEVEPSS 2.2%Apr 7, 2026
- Critical9.3nextendweb smart_slider_3 Embedded Malicious CodeKEVEPSS 1.0%Apr 7, 2026
- Critical9.3Weaver e-cology Missing Authentication for Critical FunctionKEVEPSS 20.4%Apr 7, 2026
- UnknownApple macos Improper AuthorizationKEVEPSS 0.2%Apr 7, 2026
- UnknownApple iOS/iPadOS/visionOS and macOS Sequoia/Tahoe FaceTime Password DisclosureKEVEPSS 0.9%Apr 7, 2026
- UnknownApple macos Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')KEVEPSS 0.3%Apr 7, 2026
- UnknownApple macOS Sequoia/Sonoma/Tahoe Log Entry Data Redaction VulnerabilityKEVEPSS 0.2%Apr 7, 2026
- UnknownApple iOS/iPadOS and macOS Sequoia/Sonoma/Tahoe Privilege EscalationKEVEPSS 0.2%Apr 7, 2026
- UnknownApple macos Improper Input ValidationKEVEPSS 0.2%Apr 7, 2026
- UnknownApple Safari/iOS/iPadOS/visionOS/watchOS and macOS Sequoia Interface Spoofing VulnerabilityKEVEPSS 0.8%Apr 7, 2026
- Unknownthimpress wp_hotel_booking Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVEPSS 4.2%Apr 7, 2026
- High8.7LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.KEVEPSS 4.0%Apr 6, 2026
- UnknownUnrestricted Upload of File with Dangerous TypeKEVEPSS 3.5%Apr 6, 2026
- Critical9.8ninjaforms ninja_forms_file_uploads Unrestricted Upload of File with Dangerous TypeKEVEPSS 62.9%Apr 6, 2026
- Unknowntinyproxy_project tinyproxy Use After FreeKEVEPSS 63.1%Apr 6, 2026
- Unknownfit2cloud 1panel Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVEPSS 1.0%Apr 6, 2026
- Critical9.3topsecgroup tianxin_internet_behavior_management_system Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')KEVEPSS 6.2%Apr 6, 2026
- UnknownFlowiseAI Flowise Improper Control of Generation of Code ('Code Injection')KEVEPSS 86.2%Apr 5, 2026
- UnknownStrapi Strapi Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')KEVEPSS 70.6%Apr 4, 2026
- Critical9.8Fortinet FortiClient EMS Improper Access Control VulnerabilityKEVEPSS 9.1%Apr 3, 2026
- Critical9.8Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages.KEVEPSS 3.2%Apr 2, 2026
- Unknownkaizencoders url_shortify URL Redirection to Untrusted Site ('Open Redirect')KEVEPSS 0.7%Apr 2, 2026
- Unknownwpdirectorykit wp_directory_kit Exposure of Sensitive Information to an Unauthorized ActorKEVEPSS 0.7%Apr 2, 2026
- Critical9.3metinfo metinfo Improper Control of Generation of Code ('Code Injection')KEVEPSS 4.5%Apr 1, 2026