Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownastro astro Storage of File with Sensitive Data Under Web RootPatch nowKEVEPSS 1.54%Feb 11, 2026
- Medium5.9Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityPatch nowKEVEPSS 29.50%Feb 10, 2026
- Critical9.8Fortinet FortiClient EMS SQL Injection VulnerabilityPatch nowKEVEPSS 93.87%Feb 6, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.14%Feb 5, 2026
- UnknownSonicWall SonicOS Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.72%Feb 5, 2026
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.34%Feb 4, 2026
- UnknownCisco finesse Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 22.64%Feb 4, 2026
- Unknownszuray iptv\/h.264_video_encoder_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 23.64%Feb 4, 2026
- Unknowncozmoslabs profile_builder Improper Privilege ManagementPatch nowKEVEPSS 0.54%Feb 3, 2026
- Unknownarticatech artica_proxy Relative Path TraversalPatch nowKEVEPSS 44.58%Feb 2, 2026
- UnknownApache Spark Improper AuthenticationPatch nowKEVEPSS 65.83%Jan 31, 2026
- UnknownUncontrolled Resource ConsumptionPatch nowKEVEPSS 0.28%Jan 29, 2026
- UnknownWeaver e-cology Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 0.98%Jan 27, 2026
- Critical9.3SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 96.43%Jan 22, 2026
- Critical9.8Cisco Unified Communications Products Code Injection VulnerabilityPatch nowKEVEPSS 4.54%Jan 21, 2026
- Unknownmjobtime mjobtime Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.00%Jan 21, 2026
- Unknownappspace appspace Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 61.27%Jan 21, 2026
- UnknownOut-of-bounds WritePatch nowKEVEPSS 1.30%Jan 20, 2026
- UnknownFortinet FortiSIEM Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 42.54%Jan 15, 2026
- Unknownchanjetvip t\+ Deserialization of Untrusted DataPatch nowKEVEPSS 1.10%Jan 15, 2026
- Unknownlanggenius dify Improper Access ControlPatch nowKEVEPSS 29.93%Jan 14, 2026
- Unknownepiserver episerver Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 4.65%Jan 14, 2026
- Critical9.1mindsdb mindsdb Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 20.26%Jan 12, 2026
- UnknownD-Link dir-600 Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.97%Jan 5, 2026
- High8.8Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion VulnerabilityPatch nowKEVEPSS 48.87%Dec 22, 2025
Sort