Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownelementor Website Builder Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.13%Sep 25, 2026
- Medium5.3plex media_server Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.46%Sep 23, 2026
- Medium5.3plex media_server Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.46%Sep 23, 2026
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.42%Sep 21, 2026
- UnknownImproper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 1.16%Sep 21, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.96%Sep 18, 2026
- Unknowndolibarr dolibarr_erp\/crm Incorrect AuthorizationPatch nowKEVEPSS 1.56%Sep 17, 2026
- Critical10.0Cisco Identity Services Engine Incorrect Use of Privileged APIs VulnerabilityPatch nowKEVEPSS 14.03%Sep 16, 2026
- Unknownproperfraction profilepress Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.92%Sep 16, 2026
- UnknownDeserialization of Untrusted DataPatch nowKEVEPSS 0.64%Sep 15, 2026
- Unknownpluginus husky_-_products_filter_professional_for_woocommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.23%Sep 14, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.61%Sep 10, 2026
- Unknownsensiolabs symfony Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 63.60%Sep 10, 2026
- UnknownImproper AuthenticationPatch nowKEVEPSS 2.91%Sep 9, 2026
- Unknownmonstaftp monsta_ftp Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.51%Sep 7, 2026
- Medium6.9Mikrotik RouterOS Improper Enforcement of Behavioral Workflow VulnerabilityPatch nowKEVEPSS 1.05%Sep 5, 2026
- Critical9.2MikroTik RouterOS Improper Verification of Cryptographic SignaturePatch nowKEVEPSS 6.45%Sep 5, 2026
- High7.8SonicWall SMA1000 Appliances OS Command Injection VulnerabilityPatch nowKEVEPSS 9.89%Sep 1, 2026
- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 8.04%Sep 1, 2026
- Unknownproxmox virtual_environment Missing Critical Step in AuthenticationPatch nowKEVEPSS 3.06%Sep 1, 2026
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.40%Aug 31, 2026
- Critical9.1Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.24%Aug 29, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.79%Aug 28, 2026
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.39%Aug 26, 2026
- Critical9.8SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026.Patch nowKEVEPSS 4.48%Aug 21, 2026
Sort