Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.39%Sep 22, 2026
- Medium6.5givewp givewp Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 0.31%Sep 21, 2026
- Unknownincsub forminator Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.73%Sep 21, 2026
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.42%Sep 21, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.45%Sep 21, 2026
- UnknownThemefic ultimate_addons_for_contact_form_7 Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.11%Sep 21, 2026
- Unknowniguazio nuclio Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 7.52%Sep 21, 2026
- UnknownFlowiseAI Flowise Use of Hard-coded Cryptographic KeyPatch nowKEVEPSS 0.66%Sep 21, 2026
- UnknownImproper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 1.16%Sep 21, 2026
- High7.1WordPress 7.1.1 Maintenance and Security ReleasePatch nowKEVEPSS 0.35%Sep 18, 2026
- UnknownMissing Authentication for Critical FunctionPatch nowKEVEPSS 0.98%Sep 18, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.91%Sep 18, 2026
- Unknownhardy-barth cph2_echarge_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 87.61%Sep 18, 2026
- Unknownejs ejs Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 5.55%Sep 18, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.96%Sep 18, 2026
- Unknowndolibarr dolibarr_erp\/crm Incorrect AuthorizationPatch nowKEVEPSS 1.56%Sep 17, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.98%Sep 17, 2026
- Critical10.0Cisco Identity Services Engine Incorrect Use of Privileged APIs VulnerabilityPatch nowKEVEPSS 14.03%Sep 16, 2026
- Unknownproperfraction profilepress Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.92%Sep 16, 2026
- UnknownCrocoblock jetformbuilder Incorrect Privilege AssignmentPatch nowKEVEPSS 0.28%Sep 16, 2026
- UnknownImproper Certificate ValidationPatch nowKEVEPSS 0.26%Sep 16, 2026
- UnknownUse of Hard-coded Cryptographic KeyPatch nowKEVEPSS 0.69%Sep 15, 2026
- High7.8Acronis Backup Incorrect Default Permissions VulnerabilityPatch nowKEVEPSS 0.23%Sep 15, 2026
- High8.8Google Pixel Improper Authorization VulnerabilityPatch nowKEVEPSS 0.59%Sep 15, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.38%Sep 15, 2026
Sort