Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 0.95%Sep 27, 2026
- UnknownTenda ac20_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 16.65%Sep 27, 2026
- Unknownbplugins html5_video_player Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.62%Sep 27, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.18%Sep 25, 2026
- UnknownAuthorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 0.37%Sep 25, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.27%Sep 25, 2026
- Unknownelementor Website Builder Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.13%Sep 25, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.89%Sep 24, 2026
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.59%Sep 24, 2026
- Unknowndompdf_project dompdf Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 82.85%Sep 24, 2026
- Critical9.3F5 BIG-IP APM Heap-based Buffer Overflow VulnerabilityPatch nowKEVEPSS 2.23%Sep 22, 2026
- Critical9.5Arista VeloCloud Orchestrator Improper Input Validation VulnerabilityPatch nowKEVEPSS 1.06%Sep 22, 2026
- Critical9.8Check Point Multiple Products Path Traversal VulnerabilityPatch nowKEVEPSS 75.87%Sep 22, 2026
- High8.1WordPress Core Remote File Inclusion VulnerabilityPatch nowKEVEPSS 39.98%Sep 22, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.43%Sep 22, 2026
- Unknownpixelite events_manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Sep 22, 2026
- Unknownmindsdb mindsdb Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 20.26%Sep 22, 2026
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.39%Sep 22, 2026
- Unknownincsub forminator Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.73%Sep 21, 2026
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.42%Sep 21, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.45%Sep 21, 2026
- UnknownThemefic ultimate_addons_for_contact_form_7 Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.11%Sep 21, 2026
- Unknowniguazio nuclio Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 7.52%Sep 21, 2026
- UnknownFlowiseAI Flowise Use of Hard-coded Cryptographic KeyPatch nowKEVEPSS 0.66%Sep 21, 2026
- UnknownImproper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 1.16%Sep 21, 2026