Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium6.5Qlik Sense Path Traversal VulnerabilityVuln · CVE-2023-41266 · Qlik · Sense · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 84.84%Aug 29, 2023
High7.5ZKTeco BioTime Path Traversal VulnerabilityVuln · CVE-2023-38950 · ZKTeco · BioTime · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 92.47%Aug 3, 2023
High7.2Ivanti Endpoint Manager Mobile (EPMM) Path Traversal VulnerabilityVuln · CVE-2023-35081 · Ivanti · Endpoint Manager Mobile (EPMM) · CISA KEV · CVE.org · FIRST EPSS · IvantiPatch nowKEVEPSS 63.58%Jul 28, 2023
High7.5Ignite Realtime Openfire Path Traversal VulnerabilityVuln · CVE-2023-32315 · Ignite Realtime · Openfire · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 100.00%May 26, 2023
High8.8A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path…Vuln · CVE-2023-27534 · haxx · curl · CVE.org · FIRST EPSS · NIST NVD · SplunkCheck if you run itEPSS 2.44%Mar 30, 2023
High7.1Fortinet FortiOS Path Traversal VulnerabilityVuln · CVE-2022-41328 · Fortinet · FortiOS · CISA KEV · CVE.org · FIRST EPSS · FortinetPatch nowKEVEPSS 10.68%Mar 7, 2023
High7.8Cisco SD-WAN Path Traversal VulnerabilityVuln · CVE-2022-20775 · Cisco · SD-WAN · CISA KEV · CVE.org · FIRST EPSS · CiscoPatch nowKEVEPSS 12.47%Sep 30, 2022
Critical9.8Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityVuln · CVE-2022-41352 · Synacor · Zimbra Collaboration Suite (ZCS) · CISA KEV · CVE.org · FIRST EPSS · ZimbraPatch nowKEVEPSS 95.48%Sep 25, 2022
Critical9.8Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass VulnerabilityVuln · CVE-2022-37042 · Synacor · Zimbra Collaboration Suite (ZCS) · CISA KEV · CVE.org · FIRST EPSS · ZimbraPatch nowKEVEPSS 91.89%Aug 10, 2022
Critical9.8dotCMS Unrestricted Upload of File VulnerabilityVuln · CVE-2022-26352 · dotCMS · dotCMS · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 91.25%May 18, 2022
High7.5RARLAB UnRAR Directory Traversal VulnerabilityVuln · CVE-2022-30333 · RARLAB · UnRAR · CISA KEV · CVE.org · FIRST EPSS · WinRARPatch nowKEVEPSS 99.23%May 9, 2022
High7.2Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityVuln · CVE-2022-27925 · Synacor · Zimbra Collaboration Suite (ZCS) · CISA KEV · CVE.org · FIRST EPSS · ZimbraPatch nowKEVEPSS 98.68%Apr 20, 2022
Critical9.8WSO2 Multiple Products Unrestrictive Upload of File VulnerabilityVuln · CVE-2022-29464 · WSO2 · Multiple Products · CISA KEV · CVE.org · FIRST EPSS · WSO2Patch nowKEVEPSS 100.00%Apr 18, 2022
High8.8Veeam Backup & Replication Remote Code Execution VulnerabilityVuln · CVE-2022-26500 · Veeam · Backup & Replication · CISA KEV · CVE.org · FIRST EPSS · VeeamPatch nowKEVEPSS 5.83%Mar 17, 2022
High7.8Microsoft Windows Print Spooler Privilege Escalation VulnerabilityVuln · CVE-2022-21999 · Microsoft · Windows · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 41.01%Feb 9, 2022
High7.5Grafana Path Traversal VulnerabilityVuln · CVE-2021-43798 · Grafana Labs · Grafana · CISA KEV · CVE.org · FIRST EPSS · GrafanaPatch nowKEVEPSS 88.50%Dec 7, 2021
High7.5Metabase GeoJSON API Local File Inclusion VulnerabilityVuln · CVE-2021-41277 · Metabase · Metabase · CISA KEV · CVE.org · FIRST EPSS · MetabasePatch nowKEVEPSS 97.18%Nov 17, 2021
High7.5Draytek VigorConnect Path Traversal VulnerabilityVuln · CVE-2021-20124 · DrayTek · VigorConnect · CISA KEV · CVE.org · FIRST EPSS · DrayTekPatch nowKEVEPSS 96.31%Oct 13, 2021
High7.5Draytek VigorConnect Path Traversal VulnerabilityVuln · CVE-2021-20123 · DrayTek · VigorConnect · CISA KEV · CVE.org · FIRST EPSS · DrayTekPatch nowKEVEPSS 90.23%Oct 13, 2021
Critical9.8Apache HTTP Server Path Traversal VulnerabilityVuln · CVE-2021-42013 · Alpine · Alpine Linux · Alpine Linux Security · CISA KEV · CVE.org · ApachePatch nowKEVEPSS 99.96%Oct 7, 2021
Critical9.8Apache HTTP Server Path Traversal VulnerabilityVuln · CVE-2021-41773 · Alpine · Alpine Linux · Alpine Linux Security · CISA KEV · CVE.org · ApachePatch nowKEVEPSS 99.99%Sep 29, 2021
Critical9.8VMware vCenter Server File Upload VulnerabilityVuln · CVE-2021-22005 · VMware · vCenter Server · CISA KEV · CVE.org · FIRST EPSS · VMwarePatch nowKEVEPSS 100.00%Sep 23, 2021
High8.8SAP NetWeaver Unrestricted File Upload VulnerabilityVuln · CVE-2021-38163 · SAP · NetWeaver · CISA KEV · CVE.org · FIRST EPSS · SAPPatch nowKEVEPSS 36.90%Sep 14, 2021
High8.8Microsoft MSHTML Remote Code Execution VulnerabilityVuln · CVE-2021-40444 · Microsoft · MSHTML · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 97.84%Sep 7, 2021
Medium5.3Atlassian Jira Server and Data Center Path Traversal VulnerabilityVuln · CVE-2021-26086 · Atlassian · Jira Server and Data Center · CISA KEV · CVE.org · FIRST EPSS · Atlassian, JiraPatch nowKEVEPSS 100.00%Aug 15, 2021