Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownintelbras sg_2404_mr_firmware Missing AuthorizationPatch nowKEVEPSS 36.51%May 9, 2025
- Unknownnetis-systems dl4343_firmware Improper Privilege ManagementPatch nowKEVEPSS 1.40%May 9, 2025
- High8.7apollotheme ap_pagebuilder Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 68.00%May 8, 2025
- High8.7Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.26%May 8, 2025
- High8.2Authentication Bypass by Primary WeaknessPatch nowKEVEPSS 0.35%May 8, 2025
- Medium4.8smarsh telemessage Use of Hard-coded CredentialsPatch nowKEVEPSS 0.39%May 8, 2025
- Medium4.9TeleMessage TM SGNL Hidden Functionality VulnerabilityPatch nowKEVEPSS 0.45%May 8, 2025
- High7.5Themewinter Eventin Relative Path Traversal VulnerabilityPatch nowKEVEPSS 5.16%May 8, 2025
- Medium6.9Craft CMS External Control of Assumed-Immutable Web Parameter VulnerabilityPatch nowKEVEPSS 1.35%May 7, 2025
- Critical9.3sysaid sysaid Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 72.66%May 7, 2025
- Critical9.8SysAid On-Prem Improper Restriction of XML External Entity Reference VulnerabilityPatch nowKEVEPSS 64.73%May 7, 2025
- Critical9.3SysAid On-Prem Improper Restriction of XML External Entity Reference VulnerabilityPatch nowKEVEPSS 42.61%May 7, 2025
- Critical9.8Eventin Plugin REST API Privilege Escalation VulnerbailityPatch nowKEVEPSS 27.88%May 7, 2025
- High8.8SonicWall SMA 100 Appliances Files or Directories Accessible to External PartiesPatch nowKEVEPSS 6.45%May 7, 2025
- Critical9.8Samsung MagicINFO 9 Server Path Traversal VulnerabilityPatch nowKEVEPSS 24.07%May 6, 2025
- Medium6.9oretnom23 stock_management_system Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 0.66%May 5, 2025
- Medium5.3Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.33%May 5, 2025
- Medium6.9TOTOLINK a720r_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 14.03%May 5, 2025
- High8.8Srimax Output Messenger Directory Traversal VulnerabilityPatch nowKEVEPSS 1.86%May 5, 2025
- High7.5depicter depicter Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 45.75%May 5, 2025
- Unknowntrendnet tew-411brpplus_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 4.43%May 4, 2025
- Unknowncasbin casdoor Improper AuthorizationPatch nowKEVEPSS 1.82%May 2, 2025
- Medium6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.24%May 2, 2025
- UnknownZKTeco BioTime Files or Directories Accessible to External PartiesPatch nowKEVEPSS 2.66%May 2, 2025
- UnknownZKTeco BioTime Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.26%May 2, 2025