Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High8.6Ivanti Connect Secure Authentication Bypass by Spoofing VulnerabilityKEVEPSS 26.0%Oct 13, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVOct 9, 2026
- Critical9.8In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni Representational State Transfer (REST) Application Pr…EPSS 0.4%Oct 7, 2026
- Critical9.8Check Point Multiple Products Path Traversal VulnerabilityKEVEPSS 75.9%Sep 22, 2026
- High8.1WordPress Core Remote File Inclusion VulnerabilityKEVEPSS 40.0%Sep 22, 2026
- UnknownImproper Control of Generation of Code ('Code Injection')KEVEPSS 1.4%Sep 21, 2026
- UnknownUnrestricted Upload of File with Dangerous TypeKEVEPSS 3.9%Sep 18, 2026
- Unknowndolibarr dolibarr_erp\/crm Incorrect AuthorizationKEVEPSS 1.6%Sep 17, 2026
- Critical10.0GitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityKEVEPSS 93.0%Sep 11, 2026
- UnknownN-able N-central Incomplete Filtering of Special ElementsKEVEPSS 1.1%Sep 10, 2026
- UnknownN-able N-central Authentication Bypass by Primary WeaknessKEVEPSS 1.3%Sep 9, 2026
- UnknownImproper AuthenticationKEVEPSS 2.9%Sep 9, 2026
- Critical10.0N-able N-central Static Code Injection VulnerabilityKEVEPSS 13.3%Sep 5, 2026
- Critical9.8JFrog Artifactory Improper Authentication VulnerabilityKEVEPSS 14.1%Aug 28, 2026
- UnknownUnauthenticated PHP Object Injection to Remote Code Execution on GiveWPKEVEPSS 2.3%Aug 28, 2026
- High8.8PaperCut NG/MF Missing Authentication for Critical Function VulnerabilityKEVEPSS 85.6%Aug 28, 2026
- Critical9.8SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026.KEVEPSS 4.5%Aug 21, 2026
- Critical9.8GeoTools is an open source Java library that provides tools for geospatial data.KEVEPSS 4.0%Aug 21, 2026
- Critical9.1Adobe Commerce and Magento Incorrect Authorization VulnerabilityKEVEPSS 87.5%Aug 11, 2026
- Critical10.0Metabase SQL Injection VulnerabilityKEVEPSS 97.3%Aug 6, 2026
- UnknownCVE-2026-93674 has a public Nuclei detection template.Unknown date
- UnknownCVE-2026-90898 has a public Nuclei detection template.Unknown date
- UnknownCVE-2026-89063 has a public Nuclei detection template.Unknown date
- UnknownCVE-2026-87820 has a public Nuclei detection template.Unknown date
- UnknownCVE-2026-86426 has a public Nuclei detection template.Unknown date
40 records · page 1 of 2
PreviousNext