Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A security flaw has been discovered in D-Link DIR-823X up to 20250416.Patch nowKEVEPSS 3.39%Dec 8, 2025
- UnknownThinkPHP ThinkPHP Deserialization of Untrusted DataPatch nowKEVEPSS 4.21%Dec 8, 2025
- Unknownmate-desktop atril Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.08%Dec 8, 2025
- UnknownApache log4j Deserialization of Untrusted DataPatch nowKEVEPSS 1.91%Dec 8, 2025
- Unknownpostgresql postgresql_jdbc_driver Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.23%Dec 8, 2025
- Unknown.NET Framework Elevation of Privilege VulnerabilityPatch nowKEVEPSS 2.52%Dec 8, 2025
- UnknownAxis IP Cameras Authorization Bypass VulnerabilityPatch nowKEVEPSS 86.50%Dec 8, 2025
- Critical9.4Langflow Origin Validation Error VulnerabilityPatch nowKEVEPSS 92.81%Dec 5, 2025
- Critical9.8Array Networks ArrayOS AG OS Command Injection VulnerabilityPatch nowKEVEPSS 3.42%Dec 5, 2025
- Unknownsir gnuboard URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 0.53%Dec 5, 2025
- Critical10.0Meta React Server Components Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.80%Dec 3, 2025
- Critical9.8wpdirectorykit wp_directory_kit Incorrect Implementation of Authentication AlgorithmPatch nowKEVEPSS 4.55%Dec 3, 2025
- Critical9.8dynamiapps frontend_admin Missing AuthorizationPatch nowKEVEPSS 2.19%Dec 3, 2025
- Critical9.8acfextended advanced_custom_fields_extended Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 67.62%Dec 2, 2025
- Unknownprovectus ui Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 86.84%Dec 2, 2025
- Unknownparseplatform parse-server Exposure of Sensitive System Information to an Unauthorized Control SpherePatch nowKEVEPSS 0.96%Dec 1, 2025
- Medium5.5Android Framework Information Disclosure VulnerabilityPatch nowKEVEPSS 0.26%Dec 1, 2025
- High7.8Android Framework Privilege Escalation VulnerabilityPatch nowKEVEPSS 0.26%Dec 1, 2025
- Unknownvfbpro visual_form_builder Improper Neutralization of Formula Elements in a CSV FilePatch nowKEVEPSS 2.87%Dec 1, 2025
- Unknownplenti plenti Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 2.71%Nov 29, 2025
- UnknownWSO2 api_control_plane Authentication Bypass by SpoofingPatch nowKEVEPSS 0.85%Nov 28, 2025
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.31%Nov 28, 2025
- Unknownservmask all-in-one_wp_migration Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.20%Nov 28, 2025
- Unknownfifu featured_image_from_url Insertion of Sensitive Information into Log FilePatch nowKEVEPSS 12.31%Nov 27, 2025
- UnknownFlowiseAI Flowise Missing Authentication for Critical FunctionPatch nowKEVEPSS 75.20%Nov 27, 2025