Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownOSGeo geonetwork Missing AuthorizationPatch nowKEVEPSS 0.47%Sep 3, 2026
- UnknownOSGeo geonetwork Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.19%Sep 3, 2026
- UnknownSonatype nexus_repository_manager Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 18.25%Sep 3, 2026
- Unknownayecode geodirectory Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.40%Sep 2, 2026
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.51%Sep 1, 2026
- High7.8SonicWall SMA1000 Appliances OS Command Injection VulnerabilityPatch nowKEVEPSS 9.89%Sep 1, 2026
- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 8.04%Sep 1, 2026
- UnknownTenda ch22_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 2.75%Sep 1, 2026
- UnknownTOTOLINK a7000r_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 3.05%Sep 1, 2026
- UnknownTOTOLINK a950rg_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 2.54%Sep 1, 2026
- UnknownSolarWinds web_help_desk Deserialization of Untrusted DataPatch nowKEVEPSS 67.97%Sep 1, 2026
- Unknowndeconf analytics_insights URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 1.25%Sep 1, 2026
- Unknownproxmox virtual_environment Missing Critical Step in AuthenticationPatch nowKEVEPSS 3.06%Sep 1, 2026
- UnknownPaperCut papercut_ng Exposed Dangerous Method or FunctionPatch nowKEVEPSS 1.76%Sep 1, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.52%Aug 31, 2026
- Unknownpixelite events_manager Improper Privilege ManagementPatch nowKEVEPSS 0.50%Aug 31, 2026
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.40%Aug 31, 2026
- UnknownLangflow Langflow Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 23.23%Aug 29, 2026
- Critical9.8JFrog Artifactory Improper Authentication VulnerabilityPatch nowKEVEPSS 14.12%Aug 28, 2026
- UnknownUnauthenticated PHP Object Injection to Remote Code Execution on GiveWPPatch nowKEVEPSS 2.25%Aug 28, 2026
- Critical9.4PaperCut NG/MF Unsafe Reflection VulnerabilityPatch nowKEVEPSS 63.53%Aug 28, 2026
- High8.8PaperCut NG/MF Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 85.58%Aug 28, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.79%Aug 28, 2026
- UnknownIncorrect Privilege AssignmentPatch nowKEVEPSS 0.48%Aug 28, 2026
- UnknownThemeum tutor_lms Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 0.62%Aug 28, 2026