Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownphp_curl_class_project php_curl_class Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.27%Sep 21, 2026
- Unknownzeta-producer zeta_producer Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 6.90%Sep 21, 2026
- UnknownMissing Authentication for Critical FunctionPatch nowKEVEPSS 0.98%Sep 18, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.91%Sep 18, 2026
- Unknownhardy-barth cph2_echarge_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 87.61%Sep 18, 2026
- Unknownejs ejs Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 5.55%Sep 18, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.96%Sep 18, 2026
- Unknowndolibarr dolibarr_erp\/crm Incorrect AuthorizationPatch nowKEVEPSS 1.56%Sep 17, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.98%Sep 17, 2026
- Unknownpaytm payment_gateway Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 41.76%Sep 17, 2026
- Unknowncuppacms cuppacms Files or Directories Accessible to External PartiesPatch nowKEVEPSS 3.64%Sep 17, 2026
- Critical10.0Cisco Identity Services Engine Incorrect Use of Privileged APIs VulnerabilityPatch nowKEVEPSS 14.03%Sep 16, 2026
- Unknownproperfraction profilepress Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.92%Sep 16, 2026
- UnknownCrocoblock jetformbuilder Incorrect Privilege AssignmentPatch nowKEVEPSS 0.28%Sep 16, 2026
- UnknownImproper Certificate ValidationPatch nowKEVEPSS 0.26%Sep 16, 2026
- Unknowntemplateinvaders ti_woocommerce_wishlist Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 74.00%Sep 16, 2026
- UnknownUse of Hard-coded Cryptographic KeyPatch nowKEVEPSS 0.69%Sep 15, 2026
- High7.8Acronis Backup Incorrect Default Permissions VulnerabilityPatch nowKEVEPSS 0.23%Sep 15, 2026
- UnknownFlowiseAI Flowise Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.60%Sep 15, 2026
- High8.8Google Pixel Improper Authorization VulnerabilityPatch nowKEVEPSS 0.59%Sep 15, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.38%Sep 15, 2026
- UnknownDeserialization of Untrusted DataPatch nowKEVEPSS 0.64%Sep 15, 2026
- UnknownStellarWP the_events_calendar Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.39%Sep 14, 2026
- Critical9.8Cisco Secure Email Gateway SQL Injection VulnerabilityPatch nowKEVEPSS 29.54%Sep 14, 2026
- Unknownpluginus husky_-_products_filter_professional_for_woocommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.23%Sep 14, 2026