Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownbrizy brizy Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.38%Oct 13, 2026
- Unknownkriesi enfold Improper Access ControlPatch nowKEVEPSS 0.33%Oct 13, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.32%Oct 13, 2026
- Unknownsimple-e-commerce-shopping-cart_project simple-e-commerce-shopping-cart Missing AuthorizationPatch nowKEVEPSS 0.26%Oct 13, 2026
- UnknownWebToffee import_export_wordpress_users Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.37%Oct 13, 2026
- UnknownHasThemes HT Mega Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.61%Oct 13, 2026
- Unknownuserproplugin userpro Incorrect Privilege AssignmentPatch nowKEVEPSS 0.92%Oct 13, 2026
- Unknownavada fusion_builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.39%Oct 13, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.56%Oct 13, 2026
- Unknownwp-ecommerce easy_wp_smtp Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.46%Oct 13, 2026
- UnknownLangflow Langflow Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 0.59%Oct 12, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.54%Oct 12, 2026
- Criticaltheme-fusion avada_builder Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.43%Oct 9, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.78%Oct 9, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.30%Oct 9, 2026
- Unknownvisualcomposer visual_composer_website_builder Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 2.87%Oct 8, 2026
- UnknownExternal Control of File Name or PathPatch nowKEVEPSS 0.88%Oct 7, 2026
- UnknownCritical Unauthenticated Arbitrary File Upload Vulnerability Exploited in Bricksforge PluginPatch nowKEVEPSS 1.29%Oct 7, 2026
- UnknownSonicWall security advisory (AV26-1017) – Update 1Patch nowKEVEPSS 0.48%Oct 7, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.19%Oct 6, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.41%Oct 6, 2026
- Unknownwpclever wpc_product_bundles_for_woocommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.24%Oct 6, 2026
- UnknownLangflow Langflow Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.40%Oct 6, 2026
- Critical9.3CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian productsPatch nowKEVEPSS 12.71%Oct 5, 2026
- UnknownD-Link dap-1360_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.06%Oct 5, 2026
Sort