Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownmintplexlabs anythingllm Insertion of Sensitive Information Into Sent DataPatch nowKEVEPSS 1.71%Apr 1, 2026
- UnknownownCloud guests Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.95%Apr 1, 2026
- UnknownInsertion of Sensitive Information into Log FilePatch nowKEVEPSS 1.92%Apr 1, 2026
- Unknownayecode userswp Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.38%Apr 1, 2026
- Unknowngamipress gamipress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.55%Apr 1, 2026
- Unknownstrategy11 awp_classifieds Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.52%Apr 1, 2026
- UnknownZoho ManageEngine ADSelfService Plus Username EnumerationPatch nowKEVEPSS 10.03%Apr 1, 2026
- Critical9.8The Everest Forms Pro plugin for WordPress is vulnerable to Remote Code Execution via PHP Code Injection in all versions up to, and including, 1.9.12.Patch nowKEVEPSS 4.43%Mar 31, 2026
- High8.8Google Dawn Use-After-Free VulnerabilityPatch nowKEVEPSS 0.70%Mar 31, 2026
- High7.5The Gravity SMTP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4.Patch nowKEVEPSS 2.24%Mar 31, 2026
- Unknownchancms chancms Improper Input ValidationPatch nowKEVEPSS 1.03%Mar 31, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.51%Mar 31, 2026
- Unknownrocketsoftware trufusion_enterprise Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.28%Mar 31, 2026
- Unknown1clickmigration 1_click_migration Exposure of Sensitive System Information Due to Uncleared Debug InformationPatch nowKEVEPSS 0.82%Mar 31, 2026
- Unknownthimpress learnpress Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.98%Mar 31, 2026
- Unknownjinher jinher_oa Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 1.79%Mar 31, 2026
- Unknown1clickmigration 1_click_migration Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.64%Mar 31, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.69%Mar 31, 2026
- Unknownthimpress learnpress Improper Access ControlPatch nowKEVEPSS 1.16%Mar 31, 2026
- Unknownewww image_optimizer Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 2.02%Mar 31, 2026
- UnknownMicrosoft .NET Framework Improper Input ValidationPatch nowKEVEPSS 76.71%Mar 31, 2026
- Unknowncarrcommunications rsvpmaker Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 6.92%Mar 31, 2026
- Low2.1A flaw has been found in Tenda CH22 1.0.0.1.Patch nowKEVEPSS 6.47%Mar 30, 2026
- Critical9.8supsystic contact_form Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 32.78%Mar 30, 2026
- Critical9.8Nginx UI is a web user interface for the Nginx web server.Patch nowKEVEPSS 2.52%Mar 30, 2026