Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8RoundCube Webmail Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 98.97%Jun 1, 2025
- Medium4.7relevanssi relevanssi Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.22%May 31, 2025
- High8.8Missing AuthorizationPatch nowKEVEPSS 0.32%May 30, 2025
- Critical9.3Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 71.44%May 28, 2025
- Unknownsmarsh telemessage Cleartext Storage of Sensitive Information in MemoryPatch nowKEVEPSS 0.13%May 28, 2025
- Unknownsmarsh telemessage Insecure Storage of Sensitive InformationPatch nowKEVEPSS 0.32%May 28, 2025
- Medium4.0TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere VulnerabilityPatch nowKEVEPSS 0.55%May 28, 2025
- Medium5.3TeleMessage TM SGNL Initialization of a Resource with an Insecure Default VulnerabilityPatch nowKEVEPSS 11.10%May 28, 2025
- Unknownsmarsh telemessage Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.25%May 28, 2025
- Unknownsmarsh telemessage Use of Password Hash Instead of Password for AuthenticationPatch nowKEVEPSS 0.26%May 28, 2025
- Unknowniptanus wordpress_file_upload Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 93.34%May 27, 2025
- Unknownanji-plus report Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 51.75%May 27, 2025
- Unknownroxyfileman roxy_fileman Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 73.06%May 27, 2025
- UnknownElastic Elasticsearch Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 94.79%May 27, 2025
- Unknownaviary_image_editor_add-on_for_gravity_forms_project aviary_image_editor_add-on_for_gravity_forms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 40.59%May 27, 2025
- Critical9.0vBulletin vBulletin Improper Protection of Alternate PathPatch nowKEVEPSS 57.64%May 26, 2025
- Critical10.0vBulletin vBulletin Improper Protection of Alternate PathPatch nowKEVEPSS 75.84%May 26, 2025
- Critical9.8Incorrect Privilege AssignmentPatch nowKEVEPSS 0.49%May 23, 2025
- High8.1scripteo ads_pro Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.78%May 23, 2025
- High7.5mapsvg mapsvg Missing AuthorizationPatch nowKEVEPSS 0.43%May 22, 2025
- Medium6.5infoblox netmri Improper AuthenticationPatch nowKEVEPSS 39.75%May 22, 2025
- Critical9.8infoblox netmri Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 36.41%May 22, 2025
- High7.2infoblox netmri Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 43.89%May 22, 2025
- UnknownCisco secure_firewall_threat_defense Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 96.59%May 22, 2025
- UnknownCisco IOS HTTP Server '?/' String VulnerabilityPatch nowKEVEPSS 4.29%May 22, 2025