Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8os4ed opensis Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.95%Jun 24, 2025
- Unknownalibaba fastjson Inclusion of Functionality from Untrusted Control SpherePatch nowKEVEPSS 0.76%Jun 23, 2025
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilityPatch nowKEVEPSS 1.71%Jun 23, 2025
- UnknownSymantec endpoint_detection_and_response Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 7.49%Jun 23, 2025
- Critical10.0Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 15.40%Jun 23, 2025
- Critical10.0Yonyou ufida-nc Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.56%Jun 23, 2025
- High8.7Weaver e-cology Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.12%Jun 23, 2025
- UnknownLinksys e1000 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 92.77%Jun 23, 2025
- UnknownTVT td-2108ts-cl_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 30.91%Jun 23, 2025
- Unknownengeniustech esr300_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 22.81%Jun 23, 2025
- Unknown5vtechnologies blue_angel_software_suite Use of Hard-coded CredentialsPatch nowKEVEPSS 0.66%Jun 23, 2025
- Unknown5vtechnologies blue_angel_software_suite Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 11.30%Jun 23, 2025
- Medium5.1geoffrowland jmol Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.78%Jun 23, 2025
- High8.7geoffrowland jmol Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.06%Jun 23, 2025
- UnknownStrapi Strapi Improper AuthenticationPatch nowKEVEPSS 4.12%Jun 23, 2025
- Unknownfit2cloud kubepi Use of Hard-coded CredentialsPatch nowKEVEPSS 69.67%Jun 23, 2025
- Unknowndedecms dedecms Path Traversal: '..\filedir'Patch nowKEVEPSS 2.41%Jun 23, 2025
- Unknownfasterxml jackson-databind Deserialization of Untrusted DataPatch nowKEVEPSS 18.92%Jun 23, 2025
- Unknownfasterxml jackson-databind Deserialization of Untrusted DataPatch nowKEVEPSS 18.38%Jun 23, 2025
- Unknowndebian debian_linux Deserialization of Untrusted DataPatch nowKEVEPSS 3.47%Jun 23, 2025
- Unknowncode-atlantic popup_maker Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 9.43%Jun 23, 2025
- UnknownIchano AtHome IP Camera Port 1300 Arbitrary Command ExecutionPatch nowKEVEPSS 7.50%Jun 23, 2025
- Medium6.9fabian school_fees_payment_system Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 2.00%Jun 21, 2025
- High8.6dnnsoftware DotNetNuke (DNN) Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 35.76%Jun 21, 2025
- High7.8RARLAB WinRAR Path Traversal VulnerabilityPatch nowKEVEPSS 90.48%Jun 20, 2025