Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.8Langflow Inclusion of Functionality from Untrusted Control Sphere VulnerabilityKEVEPSS 63.0%Jan 22, 2026
- Critical9.3SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel VulnerabilityKEVEPSS 96.5%Jan 22, 2026
- Critical9.8GNU InetUtils Argument Injection VulnerabilityKEVEPSS 99.0%Jan 21, 2026
- Critical9.8Cisco Unified Communications Products Code Injection VulnerabilityKEVEPSS 4.5%Jan 21, 2026
- Critical10.0Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control VulnerabilityKEVEPSS 73.2%Jan 20, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityKEVEPSS 29.2%Jan 13, 2026
- Critical9.8Fortinet Multiple Products Heap-based Buffer Overflow VulnerabilityKEVEPSS 3.8%Jan 13, 2026
- Medium5.5Microsoft Windows Information Disclosure VulnerabilityKEVEPSS 7.5%Jan 13, 2026
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting VulnerabilityKEVEPSS 20.2%Jan 5, 2026
- Critical10.0SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type VulnerabilityKEVEPSS 85.7%Dec 28, 2025
- High8.8Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion VulnerabilityKEVEPSS 48.9%Dec 22, 2025
- High8.8n8n Improper Control of Dynamically-Managed Code Resources VulnerabilityKEVEPSS 99.0%Dec 19, 2025
- High8.7MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency VulnerabilityKEVEPSS 83.2%Dec 19, 2025
- Critical9.3WatchGuard Firebox Out of Bounds Write VulnerabilityKEVEPSS 26.5%Dec 18, 2025
- Medium6.1RoundCube Webmail Cross-site Scripting VulnerabilityKEVEPSS 26.8%Dec 17, 2025
- Medium6.6SonicWall SMA1000 Missing Authorization VulnerabilityKEVEPSS 2.8%Dec 17, 2025
- Critical10.0Cisco Multiple Products Improper Input Validation VulnerabilityKEVEPSS 32.4%Dec 17, 2025
- Critical9.3ASUS Live Update Embedded Malicious Code VulnerabilityKEVEPSS 1.2%Dec 16, 2025
- Critical9.8Hewlett Packard Enterprise (HPE) OneView Code Injection VulnerabilityKEVEPSS 90.2%Dec 16, 2025
- High8.8Apple Multiple Products Use-After-Free WebKit VulnerabilityKEVEPSS 8.8%Dec 15, 2025
- Medium5.5Apple Multiple Products Classic Buffer Overflow VulnerabilityKEVEPSS 0.4%Dec 12, 2025
- High7.8Apple Multiple Products Improper Locking VulnerabilityKEVEPSS 0.4%Dec 12, 2025
- High7.1Gladinet CentreStack and Triofox Hard Coded Cryptographic VulnerabilityKEVEPSS 53.3%Dec 12, 2025
- High8.8Google Chromium Out of Bounds Memory Access VulnerabilityKEVEPSS 22.3%Dec 12, 2025
- High8.7Gogs Path Traversal VulnerabilityKEVEPSS 85.2%Dec 10, 2025