Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3TOTOLINK ca600-poe_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 0.94%May 1, 2025
- Medium5.3XWiki xwiki Missing AuthorizationPatch nowKEVEPSS 1.05%Apr 30, 2025
- Medium6.1XWiki xwiki URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 0.58%Apr 30, 2025
- Critical9.8SureTriggers suretriggers Incorrect Privilege AssignmentPatch nowKEVEPSS 54.19%Apr 30, 2025
- Medium5.3Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.07%Apr 29, 2025
- Critical9.4showdoc showdoc Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 2.65%Apr 29, 2025
- UnknownMDaemon Email Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.64%Apr 29, 2025
- Unknowntipask tipask Download of Code Without Integrity CheckPatch nowKEVEPSS 0.67%Apr 29, 2025
- Unknownfiberhome hg6245d_firmware Use of Hard-coded CredentialsPatch nowKEVEPSS 27.82%Apr 29, 2025
- Unknownthecontrolgroup voyager Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 1.22%Apr 29, 2025
- UnknownLaravel Laravel Framework Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 86.92%Apr 29, 2025
- Unknownvitejs vite Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 74.77%Apr 28, 2025
- Medium5.3TOTOLINK n150rt_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 11.28%Apr 27, 2025
- Critical9.1SAP NetWeaver Deserialization VulnerabilityPatch nowKEVEPSS 12.74%Apr 27, 2025
- High8.1ConnectWise ScreenConnect Improper Authentication VulnerabilityPatch nowKEVEPSS 3.54%Apr 25, 2025
- High7.5SonicWall SonicOS NULL Pointer DereferencePatch nowKEVEPSS 0.83%Apr 23, 2025
- Critical9.3XWiki xwiki Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 80.01%Apr 23, 2025
- UnknownWpmet gutenkit Missing AuthorizationPatch nowKEVEPSS 10.45%Apr 23, 2025
- Unknownicegram email_subscribers_\&_newsletters Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 10.08%Apr 23, 2025
- UnknownCisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Uncontrolled Resource ConsumptionPatch nowKEVEPSS 1.87%Apr 23, 2025
- Critical9.3Commvault Command Center Path Traversal VulnerabilityPatch nowKEVEPSS 97.60%Apr 22, 2025
- Critical10.0SAP NetWeaver Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 99.49%Apr 22, 2025
- Critical9.8TOTOLINK a950rg_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.34%Apr 22, 2025
- UnknownSAP NetWeaver Deserialization of Untrusted DataPatch nowKEVEPSS 5.37%Apr 22, 2025
- Medium6.5mojoportal mojoportal Improper Access ControlPatch nowKEVEPSS 1.94%Apr 21, 2025