Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A vulnerability was identified in itsourcecode Apartment Management System 1.0.Open the advisoryAug 29, 2025
- Medium5.5A vulnerability was determined in itsourcecode Sports Management System 1.0.Open the advisoryAug 29, 2025
- Critical10.0Cisco Identity Services Engine Injection VulnerabilityPatch nowKEVEPSS 68.00%Jul 16, 2025
- Critical10.0Cisco Identity Services Engine Injection VulnerabilityPatch nowKEVEPSS 97.60%Jun 25, 2025
- Critical9.8Atlassian Confluence Data Center and Server Template Injection VulnerabilityPatch nowKEVEPSS 99.98%Jan 15, 2024
- High7.3tj-actions/changed-files has Potential Actions command injection in output filenames (GHSL-2023-271)Check if you run itEPSS 3.35%Jan 2, 2024
- Low3.3In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger).Check if you run itEPSS 0.43%Apr 14, 2023
- High7.2Hitachi Vantara Pentaho BA Server Special Element Injection VulnerabilityPatch nowKEVEPSS 97.67%Apr 3, 2023
- High8.8A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name a…Check if you run itEPSS 2.16%Mar 30, 2023
- Critical9.8Cacti Command Injection VulnerabilityPatch nowKEVEPSS 99.83%Dec 5, 2022
- Critical9.8Teclib GLPI Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.88%Sep 19, 2022
- High7.5Duplicate Advisory: Improper Neutralization of CRLF Sequences in dioOpen the advisoryMay 24, 2022
- High7.5Synacor Zimbra Collaboration Suite (ZCS) Command Injection VulnerabilityPatch nowKEVEPSS 93.91%Apr 20, 2022
- High7.5A flaw was found in Python, specifically within the urllib.parse module.Check if you run itEPSS 8.54%Feb 9, 2022
- High7.8curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.Check if you run itEPSS 1.29%Dec 14, 2020
- High7.8PEAR Archive_Tar Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 84.55%Nov 19, 2020
- High7.2http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP reques…Check if you run itEPSS 6.36%Sep 27, 2020
- Critical9.8vBulletin PHP Module Remote Code Execution VulnerabilityPatch nowKEVEPSS 87.48%Aug 12, 2020
- High8.8Trend Micro Multiple Products Content Validation Escape VulnerabilityPatch nowKEVEPSS 6.17%Mar 16, 2020
- High7.5Apache Solr VelocityResponseWriter Plug-In Remote Code Execution VulnerabilityPatch nowKEVEPSS 98.57%Dec 30, 2019
- Medium6.1An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0.Check if you run itEPSS 3.51%Oct 23, 2019
- Critical9.8Atlassian Jira Server and Data Center Server-Side Template Injection VulnerabilityPatch nowKEVEPSS 84.62%Aug 9, 2019
- Critical9.8Oracle WebLogic Server, InjectionPatch nowKEVEPSS 99.98%Apr 26, 2019
- High8.8sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the BROWSER environment variable, which allows rem…Check if you run itEPSS 2.35%Dec 11, 2017
- Critical9.8Apache Struts Improper Input Validation VulnerabilityPatch nowKEVEPSS 100.00%Jul 18, 2013
825 records · page 33 of 33
PreviousNext