Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownWPExperts post_smtp Missing AuthorizationPatch nowKEVEPSS 61.48%Nov 1, 2025
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 9.61%Oct 31, 2025
- UnknownXWiki xwiki Relative Path TraversalPatch nowKEVEPSS 1.77%Oct 31, 2025
- Unknownnootheme jobmonster Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.80%Oct 31, 2025
- UnknownApache Solr Improper AuthenticationPatch nowKEVEPSS 92.75%Oct 31, 2025
- UnknownJEECG jeecg Incorrect Permission Assignment for Critical ResourcePatch nowKEVEPSS 3.52%Oct 31, 2025
- UnknownMicrosoft Windows User Interface (UI) Misrepresentation of Critical InformationPatch nowKEVEPSS 73.03%Oct 30, 2025
- Unknownkubernetes operations Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.40%Oct 30, 2025
- Unknownseeyon zhiyuan_oa_web_application_system Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.49%Oct 30, 2025
- UnknownLinksys re6500_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.69%Oct 30, 2025
- UnknownLiteSpeed Technologies LiteSpeed Cache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.38%Oct 29, 2025
- Unknownanti-malware_security_and_brute-force_firewall_project anti-malware_security_and_brute-force_firewall Missing AuthorizationPatch nowKEVEPSS 0.46%Oct 29, 2025
- UnknownTOTOLINK a3002ru Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.90%Oct 29, 2025
- UnknownD-Link dns-343_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 9.81%Oct 29, 2025
- Unknownbelkin f9k1122_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 46.27%Oct 28, 2025
- UnknownAdobe experience_manager XML Injection (aka Blind XPath Injection)Patch nowKEVEPSS 1.76%Oct 28, 2025
- UnknownZoho ManageEngine OpManager Smart Update Manager Servlet Remote Code ExecutionPatch nowKEVEPSS 78.70%Oct 28, 2025
- Unknownhancom hancom_office_2020 Buffer Underwrite ('Buffer Underflow')Patch nowKEVEPSS 0.53%Oct 27, 2025
- Unknownhancom anysign4pc Path Traversal: '../filedir'Patch nowKEVEPSS 1.30%Oct 27, 2025
- UnknownListingPro - WordPress Directory & Listing '~/listingpro-plugin/functions.php' VulnerabilityPatch nowKEVEPSS 1.61%Oct 27, 2025
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 33.34%Oct 24, 2025
- Unknownletta letta Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.02%Oct 24, 2025
- UnknownEyesOfNetwork EyesOfNetwork Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 84.60%Oct 24, 2025
- UnknownFortinet FortiOS Heap-based Buffer OverflowPatch nowKEVEPSS 0.24%Oct 23, 2025
- UnknownSonicWall sma_200_firmware Improper AuthenticationPatch nowKEVEPSS 0.91%Oct 23, 2025