Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownOracle WebLogic ClassFilter.class ServerChannelInputStream Bypass Java DeserializationPatch nowKEVEPSS 62.92%Jul 17, 2026
- Critical9.1Microsoft SharePoint Weak Authentication VulnerabilityPatch nowKEVEPSS 69.54%Jul 14, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 3.04%Jul 14, 2026
- UnknownBoldGrid w3_total_cache Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.86%Jul 14, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 15.87%Jul 14, 2026
- Critical9.8Microsoft SharePoint Server Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 1.01%Jul 14, 2026
- High7.8Microsoft Active Directory Federation Services Insufficient Granularity of Access Control VulnerabilityPatch nowKEVEPSS 0.35%Jul 14, 2026
- High7.2SonicWall SMA1000 Appliances Code Injection VulnerabilityPatch nowKEVEPSS 11.79%Jul 14, 2026
- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 6.79%Jul 14, 2026
- UnknownMicrosoft Windows Improper Link Resolution Before File Access ('Link Following')Patch nowKEVEPSS 0.37%Jul 10, 2026
- UnknownVeeam veeam_backup_\&_replication Deserialization of Untrusted DataPatch nowKEVEPSS 0.61%Jul 10, 2026
- Unknownmailoptin mailoptin Incorrect Privilege AssignmentPatch nowKEVEPSS 0.48%Jul 9, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 5.09%Jul 9, 2026
- Unknowniqonic wpbookit Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.52%Jul 9, 2026
- High8.8BerriAI LiteLLM Improper Authentication VulnerabilityPatch nowKEVEPSS 0.84%Jul 8, 2026
- Critical10.0Balbooa Forms Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 14.85%Jul 8, 2026
- UnknownFlowiseAI Flowise Missing Authentication for Critical FunctionPatch nowKEVEPSS 2.05%Jul 8, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.04%Jul 7, 2026
- UnknownRuckus AP Boot Image VulnerabilityPatch nowKEVEPSS 0.51%Jul 7, 2026
- UnknownRuckus AP Unauthorized Image Signature VulnerabilityPatch nowKEVEPSS 0.55%Jul 7, 2026
- High8.4Flyto2 Core is an execution kernel for automation and AI-agent workflows.Patch nowKEVEPSS 0.26%Jul 6, 2026
- UnknownGitea Gitea Improper Access ControlPatch nowKEVEPSS 2.76%Jul 6, 2026
- UnknownCacti Cacti Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 88.79%Jul 6, 2026
- High7.8Linux Kernel Unspecified VulnerabilityPatch nowKEVEPSS 0.71%Jul 4, 2026
- UnknownFlowiseAI Flowise External Control of File Name or PathPatch nowKEVEPSS 4.36%Jul 3, 2026