Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownXWiki xwiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 93.48%Sep 25, 2025
- UnknownHewlett Packard Enterprise OfficeConnect Remote Authentication Bypass VulnerabilityPatch nowKEVEPSS 2.81%Sep 25, 2025
- High7.7Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution VulnerabilityPatch nowKEVEPSS 40.17%Sep 24, 2025
- UnknownGutenify Plugin Cross Site Scripting (XSS)Patch nowKEVEPSS 0.23%Sep 23, 2025
- Unknownb-link bl-wr9000_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 6.86%Sep 23, 2025
- Critical9.8SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 89.50%Sep 22, 2025
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.74%Sep 22, 2025
- Medium6.1Libraesva Email Security Gateway Command Injection VulnerabilityPatch nowKEVEPSS 1.86%Sep 19, 2025
- Critical9.8Fortra GoAnywhere MFT Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.80%Sep 18, 2025
- Critical9.3WatchGuard Firebox Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 91.80%Sep 17, 2025
- Critical9.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 5.39%Sep 17, 2025
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.45%Sep 17, 2025
- Unknownarticatech artica_proxy Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.65%Sep 16, 2025
- Unknownb-link bl-wr9000_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 10.88%Sep 15, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 86.84%Sep 15, 2025
- UnknownRealtek rtl819x_jungle_software_development_kit Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.19%Sep 15, 2025
- Unknownsigb pmb Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.17%Sep 14, 2025
- Unknownarkextensions jck_editor Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 82.98%Sep 14, 2025
- Critical9.8Samsung Mobile Devices Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 33.17%Sep 12, 2025
- Critical9.8Samsung Mobile Devices Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 2.14%Sep 12, 2025
- Unknownw3eden download_manager Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.88%Sep 11, 2025
- Unknown10web photo_gallery Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 74.61%Sep 11, 2025
- Unknownsmartdatasoft smartblog Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 74.49%Sep 11, 2025
- Unknownopsview opsview Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 16.11%Sep 11, 2025
- Critical9.1Adobe Commerce and Magento Improper Input Validation VulnerabilityPatch nowKEVEPSS 94.31%Sep 9, 2025