Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownApple iOS/macOS/tvOS/watchOS 'libxpc' VulnerabilityPatch nowKEVEPSS 13.48%Jul 30, 2025
- High8.8Apple Multiple Products Buffer Overflow VulnerabilityPatch nowKEVEPSS 1.60%Jul 29, 2025
- UnknownSolarWinds webhelpdesk Use of Hard-coded CredentialsPatch nowKEVEPSS 0.30%Jul 29, 2025
- Unknownbricksbuilder bricks Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.45%Jul 28, 2025
- High8.4RARLAB WinRAR Improper Input ValidationPatch nowKEVEPSS 1.85%Jul 25, 2025
- Critical9.8iqonic wpbookit Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.52%Jul 24, 2025
- High8.8WPExperts post_smtp Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.60%Jul 24, 2025
- Critical9.3oscommerce online_merchant Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 4.47%Jul 23, 2025
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.66%Jul 23, 2025
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.63%Jul 23, 2025
- High7.8Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition VulnerabilityPatch nowKEVEPSS 1.34%Jul 22, 2025
- Unknowncedargate ez-net_portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.03%Jul 22, 2025
- UnknownImproper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 53.26%Jul 21, 2025
- UnknownGrafana Labs Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 97.01%Jul 21, 2025
- Unknownlkw199711 smanga Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.62%Jul 21, 2025
- Unknownbyzoro smart_s85f_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 17.98%Jul 21, 2025
- Unknowntongda2000 tongda_office_anywhere Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.70%Jul 21, 2025
- Unknownprestashop poststaticfooter Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 32.41%Jul 21, 2025
- Unknownguralp man-eam-0003 Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 9.80%Jul 21, 2025
- Unknownopmc woocommerce_dropshipping Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.03%Jul 21, 2025
- UnknownTOTOLINK n600r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.54%Jul 21, 2025
- Unknownindionetworks unibox_firmware Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 4.95%Jul 21, 2025
- UnknownTerraMaster TerraMaster OS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 16.66%Jul 21, 2025
- Unknownelbtide advanced_booking_calendar Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.48%Jul 20, 2025
- High7.5Prettier eslint-config-prettier Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 4.93%Jul 19, 2025