Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCritical Unauthenticated Arbitrary File Upload Vulnerability Exploited in Bricksforge PluginPatch nowKEVEPSS 0.31%Oct 7, 2026
- Medium6.5Snowflake drivers writes sensitive information to logsCheck if you run itEPSS 0.09%Oct 5, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.53%Oct 2, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.46%Sep 30, 2026
- Unknown74cms 74cms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 8.58%Sep 30, 2026
- UnknownExternal Control of File Name or PathPatch nowKEVEPSS 0.99%Sep 29, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.71%Sep 28, 2026
- Unknowndompdf_project dompdf Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 82.85%Sep 24, 2026
- High8.8The BM Content Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ux_cb_remove_layout_ajax() and ux_…Check if you run itEPSS 0.57%Sep 22, 2026
- High8.1WordPress Core Remote File Inclusion VulnerabilityPatch nowKEVEPSS 39.98%Sep 22, 2026
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.39%Sep 22, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.45%Sep 21, 2026
- Unknownphp_curl_class_project php_curl_class Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.27%Sep 21, 2026
- Unknownzeta-producer zeta_producer Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 6.90%Sep 21, 2026
- UnknownCVE-2026-56096 is listed by Updated TYPO3 ext:solr affected versions.Check if you run itEPSS 0.43%Sep 17, 2026
- UnknownCVE-2026-56095 is listed by Updated TYPO3 ext:solr affected versions.Check if you run itEPSS 0.32%Sep 17, 2026
- UnknownCVE-2026-56094 is listed by Updated TYPO3 ext:solr affected versions.Check if you run itEPSS 0.33%Sep 17, 2026
- UnknownCVE-2026-56093 is listed by Updated TYPO3 ext:solr affected versions.Check if you run itEPSS 0.31%Sep 17, 2026
- UnknownCVE-2026-56092 is listed by Updated TYPO3 ext:solr affected versions.Check if you run itEPSS 0.29%Sep 17, 2026
- Unknowndolibarr dolibarr_erp\/crm Incorrect AuthorizationPatch nowKEVEPSS 1.56%Sep 17, 2026
- Unknownproperfraction profilepress Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.92%Sep 16, 2026
- UnknownUse of Hard-coded Cryptographic KeyPatch nowKEVEPSS 0.69%Sep 15, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.38%Sep 15, 2026
- Unknowncar_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.06%Sep 14, 2026
- Unknowncar_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.31%Sep 14, 2026