Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.53%Nov 12, 2025
- High7.8Microsoft Windows Link Following VulnerabilityPatch nowKEVEPSS 4.61%Nov 11, 2025
- High7.0Microsoft Windows Race Condition VulnerabilityPatch nowKEVEPSS 4.46%Nov 11, 2025
- Unknownhoverfly hoverfly Improper Input ValidationPatch nowKEVEPSS 10.54%Nov 10, 2025
- UnknownMissing Authentication for Critical FunctionPatch nowKEVEPSS 32.87%Nov 10, 2025
- Critical9.1Gladinet Triofox Improper Access Control VulnerabilityPatch nowKEVEPSS 95.75%Nov 10, 2025
- Unknowncontrolid idsecure Improper AuthenticationPatch nowKEVEPSS 65.00%Nov 10, 2025
- Unknowntamronos tamronos Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 7.08%Nov 10, 2025
- Unknownskittles employee_records_system Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.42%Nov 10, 2025
- Unknowninsightsoftware jreport Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.21%Nov 10, 2025
- Unknownrainbowfishsoftware pacsone_server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.99%Nov 10, 2025
- Unknowngithub github Deserialization of Untrusted DataPatch nowKEVEPSS 21.24%Nov 10, 2025
- Unknowncodeworx_technologies dcp-portal Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.86%Nov 10, 2025
- UnknownImproper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 1.54%Nov 7, 2025
- Unknowndigitalzoomstudio zoomsounds Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 5.39%Nov 7, 2025
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.62%Nov 7, 2025
- High8.6Sangoma FreePBX OS Command Injection VulnerabilityPatch nowKEVEPSS 84.62%Nov 6, 2025
- High8.8Apple Multiple products Use-After-Free VulnerabilityPatch nowKEVEPSS 4.04%Nov 5, 2025
- Unknownmeowapps ai_engine Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 74.83%Nov 5, 2025
- UnknownMoodle moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.13%Nov 5, 2025
- UnknownAtlassian Confluence Server and Data Center Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 38.84%Nov 5, 2025
- Unknownthinkcmf thinkcmf Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 7.42%Nov 5, 2025
- Unknownoscommerce online_merchant Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 4.47%Nov 5, 2025
- Critical9.8React Native Community CLI OS Command Injection VulnerabilityPatch nowKEVEPSS 93.98%Nov 3, 2025
- UnknownXWiki xwiki Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 87.90%Nov 3, 2025