Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownGrafana Labs Grafana Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.06%Aug 7, 2025
- UnknownMicro Focus acutoweb Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.77%Aug 7, 2025
- UnknownTrend Micro Apex One and Apex One as a Service Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 19.69%Aug 6, 2025
- UnknownUse of Weak CredentialsPatch nowKEVEPSS 15.83%Aug 6, 2025
- High8.7XWiki xwiki Exposure of Private Personal Information to an Unauthorized ActorPatch nowKEVEPSS 1.37%Aug 5, 2025
- Critical10.0Adobe Experience Manager Forms Code Execution VulnerabilityPatch nowKEVEPSS 88.26%Aug 5, 2025
- Critical9.8Trend Micro Apex One OS Command Injection VulnerabilityPatch nowKEVEPSS 23.92%Aug 5, 2025
- High8.7Exposed IOCTL with Insufficient Access ControlPatch nowKEVEPSS 8.01%Aug 5, 2025
- Critical9.1Dassault Systèmes DELMIA Apriso Missing Authorization VulnerabilityPatch nowKEVEPSS 73.75%Aug 4, 2025
- High8.0Dassault Systèmes DELMIA Apriso Code Injection VulnerabilityPatch nowKEVEPSS 79.34%Aug 4, 2025
- UnknownMicrosoft Windows Improper Input ValidationPatch nowKEVEPSS 5.97%Aug 4, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 34.59%Aug 2, 2025
- Critical9.8Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 4.51%Aug 1, 2025
- Unknownlylme lylme_spage Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.44%Aug 1, 2025
- UnknownMicrosoft Windows Untrusted Pointer DereferencePatch nowKEVEPSS 1.98%Aug 1, 2025
- Unknownakamai cloudtest Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 2.14%Jul 31, 2025
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.06%Jul 31, 2025
- UnknownYonyou ufida_erp-nc Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.84%Jul 31, 2025
- Unknownsantesoft sante_pacs_server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 35.38%Jul 31, 2025
- UnknownOSGeo GeoServer Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 2.30%Jul 31, 2025
- Unknownidccms idccms Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.91%Jul 31, 2025
- UnknownCitrix application_delivery_controller_firmware Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 10.83%Jul 31, 2025
- UnknownPalo Alto Networks PAN-OS Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 7.15%Jul 31, 2025
- Critical10.0Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.04%Jul 31, 2025
- UnknownCisco unified_ip_interactive_voice_response Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 25.75%Jul 31, 2025