Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8OSGeo GeoServer Improper Restriction of XML External Entity Reference VulnerabilityPatch nowKEVEPSS 60.52%Nov 25, 2025
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 76.14%Nov 25, 2025
- UnknownWavePlayer Unauthenticated Arbitrary File UploadPatch nowKEVEPSS 0.57%Nov 25, 2025
- UnknownLinksys e1700_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 54.47%Nov 24, 2025
- UnknownTVT nvms-9000_firmware Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.86%Nov 24, 2025
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.62%Nov 24, 2025
- UnknownFlowiseAI Flowise Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 22.37%Nov 19, 2025
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 10.39%Nov 19, 2025
- UnknownASUS asus_firmware Improper Input ValidationPatch nowKEVEPSS 1.23%Nov 19, 2025
- UnknownASUS rt-ax55_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.29%Nov 19, 2025
- UnknownASUS rt-ax55_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.29%Nov 19, 2025
- UnknownASUS rt-ax55_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.20%Nov 19, 2025
- UnknownASUS rt-ax55_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.29%Nov 19, 2025
- High7.2Fortinet FortiWeb OS Command Injection VulnerabilityPatch nowKEVEPSS 55.58%Nov 18, 2025
- Unknownargoproj argo_cd Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 5.66%Nov 18, 2025
- Unknownhtml2wp_project html2wp Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 12.19%Nov 18, 2025
- Unknownemby emby Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 87.15%Nov 18, 2025
- Unknowntraccar traccar Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.28%Nov 17, 2025
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.67%Nov 17, 2025
- UnknownDitty WordPress Plugin Unauthenticated Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 19.59%Nov 14, 2025
- Unknownzentao biz Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.48%Nov 13, 2025
- Medium6.9N-able N-central Improper Validation of Specified Quantity in InputPatch nowKEVEPSS 37.39%Nov 12, 2025
- High8.4N-able N-central Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 31.68%Nov 12, 2025
- High8.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 5.03%Nov 12, 2025
- Unknownsecurenvoy multi-factor_authentication_solutions Cleartext Transmission of Sensitive InformationPatch nowKEVEPSS 3.30%Nov 12, 2025