Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownpercha com_perchagallery Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 15.78%Dec 26, 2025
- Unknowntychesoftwares print_invoice_\&_delivery_notes_for_woocommerce Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 3.71%Dec 24, 2025
- UnknownRedis redis Use After FreePatch nowKEVEPSS 82.29%Dec 23, 2025
- High8.8Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion VulnerabilityPatch nowKEVEPSS 48.87%Dec 22, 2025
- High8.8n8n Improper Control of Dynamically-Managed Code Resources VulnerabilityPatch nowKEVEPSS 98.99%Dec 19, 2025
- High8.7MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency VulnerabilityPatch nowKEVEPSS 83.22%Dec 19, 2025
- UnknownCowrie Unrestricted wget/curl Emulation SSRF-Based DDoS AmplificationPatch nowKEVEPSS 0.68%Dec 19, 2025
- UnknownD-Tale Custom Filter Input 'update-settings' Remote Code ExecutionPatch nowKEVEPSS 2.42%Dec 19, 2025
- Unknownman d-tale Use of Hard-coded CredentialsPatch nowKEVEPSS 77.97%Dec 19, 2025
- Unknownjoedolson my_calendar Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 63.14%Dec 19, 2025
- Critical9.3WatchGuard Firebox Out of Bounds Write VulnerabilityPatch nowKEVEPSS 26.51%Dec 18, 2025
- Medium6.1RoundCube Webmail Cross-site Scripting VulnerabilityPatch nowKEVEPSS 26.84%Dec 17, 2025
- Medium6.6SonicWall SMA1000 Missing Authorization VulnerabilityPatch nowKEVEPSS 2.76%Dec 17, 2025
- Critical10.0Cisco Multiple Products Improper Input Validation VulnerabilityPatch nowKEVEPSS 32.39%Dec 17, 2025
- Unknownninjaforms ninja_forms Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 0.44%Dec 17, 2025
- Critical9.3ASUS Live Update Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 1.20%Dec 16, 2025
- Critical9.8Hewlett Packard Enterprise (HPE) OneView Code Injection VulnerabilityPatch nowKEVEPSS 90.19%Dec 16, 2025
- Unknowneclipse business_intelligence_and_reporting_tools Improper Input ValidationPatch nowKEVEPSS 57.98%Dec 16, 2025
- Unknownastro astro Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)Patch nowKEVEPSS 0.49%Dec 15, 2025
- UnknownFortinet FortiWeb Improper Verification of Cryptographic SignaturePatch nowKEVEPSS 29.22%Dec 15, 2025
- UnknownXWiki xwiki Relative Path TraversalPatch nowKEVEPSS 1.68%Dec 15, 2025
- Unknownagent-zero agent-zero Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.07%Dec 15, 2025
- Unknownlynxtechnology twonky_server Unprotected Alternate ChannelPatch nowKEVEPSS 32.53%Dec 15, 2025
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.83%Dec 15, 2025
- Unknownappsmith appsmith Improper Access ControlPatch nowKEVEPSS 30.66%Dec 15, 2025