Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Fortinet FortiMail Path Traversal VulnerabilityPatch nowKEVEPSS 2.20%Oct 1, 2026
- Unknownstreamax streamax_crocus Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.87%Oct 1, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.81%Oct 1, 2026
- Unknownicewarp icewarp_server URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 1.59%Oct 1, 2026
- Critical9.8Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityPatch nowKEVEPSS 1.82%Sep 30, 2026
- Critical9.4Zammad GmbH Zammad Improper Privilege Management VulnerabilityPatch nowKEVEPSS 0.55%Sep 30, 2026
- Critical9.4Zammad GmbH Zammad Session Fixation VulnerabilityPatch nowKEVEPSS 1.26%Sep 30, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.55%Sep 30, 2026
- Unknownpalletsprojects werkzeug Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.78%Sep 30, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.46%Sep 30, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.45%Sep 30, 2026
- Unknown74cms 74cms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 8.58%Sep 30, 2026
- UnknownExternal Control of File Name or PathPatch nowKEVEPSS 0.99%Sep 29, 2026
- Unknowns2member s2member Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.42%Sep 29, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.46%Sep 29, 2026
- UnknownApache OFBiz Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 25.74%Sep 29, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.48%Sep 29, 2026
- High8.8Apple Multiple Products Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 1.24%Sep 28, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.71%Sep 28, 2026
- Critical9.5Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityPatch nowKEVEPSS 1.30%Sep 27, 2026
- Critical9.5Citrix NetScaler Improper Input Validation VulnerabilityPatch nowKEVEPSS 1.08%Sep 27, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 0.95%Sep 27, 2026
- UnknownTenda ac20_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 16.65%Sep 27, 2026
- Unknownbplugins html5_video_player Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.62%Sep 27, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.18%Sep 25, 2026