Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8kunbus revpi_status Incorrect Type Conversion or CastPatch nowKEVEPSS 51.27%Jun 6, 2025
- Unknownwpdevart poll\,_survey\,_questionnaire_and_voting_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 46.00%Jun 6, 2025
- Medium4.6IGEL OS Use of a Key Past its Expiration Date VulnerabilityPatch nowKEVEPSS 4.93%Jun 5, 2025
- UnknownParagon Software Products biontdrv.sys memmove Function Privilege EscalationPatch nowKEVEPSS 0.50%Jun 5, 2025
- Unknownparagon-software paragon_backup_\&_recovery NULL Pointer DereferencePatch nowKEVEPSS 0.35%Jun 5, 2025
- UnknownParagon Software Products Arbitrary Kernel Memory Write VulnerabilityPatch nowKEVEPSS 0.37%Jun 5, 2025
- UnknownParagon Software Products Arbitrary Kernel Memory Mapping VulnerabilityPatch nowKEVEPSS 0.34%Jun 5, 2025
- UnknownTenda w15e_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 28.80%Jun 5, 2025
- Unknownreprisesoftware reprise_license_manager Direct Request ('Forced Browsing')Patch nowKEVEPSS 9.32%Jun 5, 2025
- Unknownreprisesoftware reprise_license_manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 4.90%Jun 5, 2025
- Unknownreprisesoftware reprise_license_manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 3.24%Jun 5, 2025
- UnknownMalwareFox AntiMalware zam64.sys and zam32.sys Incorrect Acces Control VulnerabilityPatch nowKEVEPSS 3.40%Jun 5, 2025
- Medium5.3D-Link dcs-932l_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 13.94%Jun 4, 2025
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.95%Jun 4, 2025
- UnknownTiagorlampert CHAOS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 8.04%Jun 4, 2025
- Medium5.3TOTOLINK x2000r_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 13.20%Jun 3, 2025
- High8.1Path Traversal: '.../...//'Patch nowKEVEPSS 0.65%Jun 3, 2025
- UnknownWP Job Portal WordPress Plugin Unauthenticated SQL InjectionPatch nowKEVEPSS 3.60%Jun 3, 2025
- Unknownroxy-wi roxy-wi Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 28.79%Jun 3, 2025
- Unknowntrueranker true_ranker Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 77.94%Jun 3, 2025
- Critical9.0Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 96.91%Jun 2, 2025
- High8.8Google Chromium V8 Out-of-Bounds Read and Write VulnerabilityPatch nowKEVEPSS 7.82%Jun 2, 2025
- High7.5Qualcomm Multiple Chipsets Use-After-Free VulnerabilityPatch nowKEVEPSS 1.02%Jun 2, 2025
- High8.6Qualcomm Multiple Chipsets Incorrect Authorization VulnerabilityPatch nowKEVEPSS 46.00%Jun 2, 2025
- High8.6Qualcomm Multiple Chipsets Incorrect Authorization VulnerabilityPatch nowKEVEPSS 84.00%Jun 2, 2025