Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1VeronaLabs wp_statistics Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Jun 1, 2026
- Critical9.8Apache Solr Use of Hard-coded CredentialsPatch nowKEVEPSS 2.84%Jun 1, 2026
- High8.5LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following VulnerabilityPatch nowKEVEPSS 0.81%Jun 1, 2026
- High8.4Android Framework Integer Overflow VulnerabilityPatch nowKEVEPSS 1.71%Jun 1, 2026
- High8.8brainstormforce spectra Improper Privilege ManagementPatch nowKEVEPSS 0.97%May 30, 2026
- Critical9.1Missing AuthorizationPatch nowKEVEPSS 0.46%May 29, 2026
- Critical9.8Missing Authentication for Critical FunctionPatch nowKEVEPSS 1.86%May 29, 2026
- High7.2linkwhisper link_whisper_free Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.24%May 29, 2026
- Critical9.8acfextended advanced_custom_fields_extended Improper Privilege ManagementPatch nowKEVEPSS 0.87%May 28, 2026
- Critical9.8Oracle E-Business Suite Improper Privilege Management VulnerabilityPatch nowKEVEPSS 0.81%May 28, 2026
- Medium6.5The Independent Analytics plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.14.9.Patch nowKEVEPSS 0.44%May 28, 2026
- High7.3This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.Patch nowKEVEPSS 0.17%May 28, 2026
- Critical9.3Nx Console Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 1.34%May 27, 2026
- High8.6Dozzle is a realtime log viewer for docker containers.Patch nowKEVEPSS 1.60%May 26, 2026
- Critical9.0A flaw was found in the Samba printing subsystem.Patch nowKEVEPSS 13.93%May 26, 2026
- Critical9.3Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 2.08%May 26, 2026
- Medium6.5Kludex Starlette HTTP Request/Response Smuggling VulnerabilityPatch nowKEVEPSS 7.06%May 26, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log allows DOM-Based XSS.Patch nowKEVEPSS 0.22%May 25, 2026
- High8.1Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via a preg_replace() backslash escape bypass.Patch nowKEVEPSS 0.89%May 25, 2026
- High7.8Linux Kernel Out-of-bounds WritePatch nowKEVEPSS 2.43%May 23, 2026
- High8.8Improper Privilege ManagementPatch nowKEVEPSS 0.45%May 23, 2026
- High8.8Microsoft SharePoint Server Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 2.70%May 22, 2026
- Critical10.0Ubiquiti UniFi OS Improper Input Validation VulnerabilityPatch nowKEVEPSS 45.77%May 21, 2026
- Critical10.0Ubiquiti UniFi OS Path Traversal VulnerabilityPatch nowKEVEPSS 1.79%May 21, 2026
- Critical10.0Ubiquiti UniFi OS Improper Access Control VulnerabilityPatch nowKEVEPSS 15.21%May 21, 2026
Sort