Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownexrick xmall Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.35%Sep 14, 2026
- Unknowncar_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.06%Sep 14, 2026
- Unknowncar_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.31%Sep 14, 2026
- Unknowncar_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.56%Sep 14, 2026
- Unknowncar_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.56%Sep 14, 2026
- Unknownmingsoft mcms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.46%Sep 14, 2026
- Unknownmicrofinance_management_system_project microfinance_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 13.83%Sep 14, 2026
- UnknownNagios Nagios XI Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 42.05%Sep 14, 2026
- UnknownNagios Nagios XI Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 42.05%Sep 14, 2026
- UnknownStellarWP the_events_calendar Deserialization of Untrusted DataPatch nowKEVEPSS 1.47%Sep 12, 2026
- Critical10.0GitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityPatch nowKEVEPSS 92.96%Sep 11, 2026
- UnknownFortinet FortiOS Insufficient Session ExpirationPatch nowKEVEPSS 0.34%Sep 11, 2026
- Unknownvitejs vite Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.10%Sep 11, 2026
- Unknowncomsenz duomicms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.26%Sep 11, 2026
- UnknownJoomla! Joomla! Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 99.83%Sep 11, 2026
- UnknownN-able N-central Incomplete Filtering of Special ElementsPatch nowKEVEPSS 1.12%Sep 10, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.39%Sep 10, 2026
- UnknownSogou Input Method 'biz_helper' Remote Code ExecutionPatch nowKEVEPSS 0.93%Sep 10, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.61%Sep 10, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.32%Sep 10, 2026
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.59%Sep 10, 2026
- Unknownsensiolabs symfony Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 63.60%Sep 10, 2026
- Unknownsalesagility suitecrm Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.69%Sep 10, 2026
- Unknownvarktech pricing_deals_for_woocommerce Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 8.01%Sep 10, 2026
- Critical9.8Check Point Multiple Products Improper Certificate Validation VulnerabilityPatch nowKEVEPSS 50.40%Sep 9, 2026