Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

Critical9.8Zyxel Multiple NAS Devices Command Injection VulnerabilityVuln · CVE-2023-27992 · Zyxel · Multiple Network-Attached Storage (NAS) Devices · CISA KEV · CVE.org · FIRST EPSS · ZyxelPatch nowKEVEPSS 82.83%Jun 19, 2023
Critical9.8Zyxel Multiple Firewalls OS Command Injection VulnerabilityVuln · CVE-2023-28771 · Zyxel · Multiple Firewalls · CISA KEV · CVE.org · FIRST EPSS · ZyxelPatch nowKEVEPSS 99.28%Apr 24, 2023
Critical9.8D-Link DIR-820 Router OS Command Injection VulnerabilityVuln · CVE-2023-25280 · D-Link · DIR-820 Router · CISA KEV · CVE.org · FIRST EPSS · D-LinkPatch nowKEVEPSS 97.86%Mar 15, 2023
Critical9.8CWP Control Web Panel OS Command Injection VulnerabilityVuln · CVE-2022-44877 · CWP · Control Web Panel · CISA KEV · CVE.org · FIRST EPSS · Control Web PanelPatch nowKEVEPSS 100.00%Jan 5, 2023
Critical9.8Cacti Command Injection VulnerabilityVuln · CVE-2022-46169 · Cacti · Cacti · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 99.83%Dec 5, 2022
High8.8Atlassian Bitbucket Server and Data Center Command Injection VulnerabilityVuln · CVE-2022-36804 · Atlassian · Bitbucket Server and Data Center · CISA KEV · CVE.org · FIRST EPSS · AtlassianPatch nowKEVEPSS 99.17%Aug 24, 2022
High8.8Apache Spark Command Injection VulnerabilityVuln · CVE-2022-33891 · Apache · Spark · CISA KEV · CVE.org · FIRST EPSS · ApachePatch nowKEVEPSS 93.24%Jul 18, 2022
High7.3In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metac…Vuln · CVE-2022-2068 · openssl · openssl · CVE.org · FIRST EPSS · NIST NVD · OpenSSLCheck this weekEPSS 96.39%Jun 21, 2022
Critical9.8SolarView Compact Command Injection VulnerabilityVuln · CVE-2022-29303 · SolarView · Compact · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 98.00%May 12, 2022
Critical9.8Zyxel Multiple Firewalls OS Command Injection VulnerabilityVuln · CVE-2022-30525 · Zyxel · Multiple Firewalls · CISA KEV · CVE.org · FIRST EPSS · ZyxelPatch nowKEVEPSS 99.94%May 12, 2022
High7.3The c_rehash script does not properly sanitise shell metacharacters to prevent command injection.Vuln · CVE-2022-1292 · siemens · brownfield connectivity gateway · CVE.org · FIRST EPSS · NIST NVDCheck this weekEPSS 82.61%May 3, 2022
Medium6.8Zoho ManageEngine ADSelfService Plus Remote Code Execution VulnerabilityVuln · CVE-2022-28810 · Zoho · ManageEngine · CISA KEV · CVE.org · FIRST EPSS · ManageEnginePatch nowKEVEPSS 70.97%Apr 14, 2022
Critical9.8D-Link DIR-820L Remote Code Execution VulnerabilityVuln · CVE-2022-26258 · D-Link · DIR-820L · CISA KEV · CVE.org · FIRST EPSS · D-LinkPatch nowKEVEPSS 91.63%Mar 27, 2022
Critical9.8D-Link Multiple Routers Remote Code Execution VulnerabilityVuln · CVE-2021-45382 · D-Link · Multiple Routers · CISA KEV · CVE.org · FIRST EPSS · D-LinkPatch nowKEVEPSS 97.84%Feb 17, 2022
High8.0Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityVuln · CVE-2022-20708 · Cisco · RV Series Routers · CISA KEV · CVE.org · FIRST EPSS · CiscoPatch nowKEVEPSS 14.86%Feb 10, 2022
High7.2Reolink RLC-410W IP Camera OS Command Injection VulnerabilityVuln · CVE-2021-40407 · Reolink · RLC-410W IP Camera · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 47.63%Jan 28, 2022
Medium6.5SonicWall SMA100 Appliances OS Command Injection VulnerabilityVuln · CVE-2021-20035 · SonicWall · SMA100 Appliances · CISA KEV · CVE.org · FIRST EPSS · SonicWallPatch nowKEVEPSS 4.18%Sep 27, 2021
Critical9.8Hikvision Improper Input ValidationVuln · CVE-2021-36260 · Hikvision · Security cameras web server · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 99.87%Sep 22, 2021
Critical9.8Realtek Jungle SDK Remote Code Execution VulnerabilityVuln · CVE-2021-35394 · Realtek · Jungle Software Development Kit (SDK) · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 99.88%Aug 16, 2021
Critical9.8Sunhillo SureLine OS Command Injection VulnerablityVuln · CVE-2021-36380 · Sunhillo · SureLine · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 97.83%Aug 13, 2021
Critical9.8Cisco HyperFlex HX Data Platform Command Injection VulnerabilityVuln · CVE-2021-1498 · Cisco · HyperFlex HX · CISA KEV · CVE.org · FIRST EPSS · CiscoPatch nowKEVEPSS 100.00%May 6, 2021
Critical9.8Cisco HyperFlex HX Installer Virtual Machine Command Injection VulnerabilityVuln · CVE-2021-1497 · Cisco · HyperFlex HX · CISA KEV · CVE.org · FIRST EPSS · CiscoPatch nowKEVEPSS 99.93%May 6, 2021
Critical9.8QNAP Network-Attached Storage (NAS) Command Injection VulnerabilityVuln · CVE-2020-2509 · QNAP · QNAP Network-Attached Storage (NAS) · CISA KEV · CVE.org · FIRST EPSS · QNAPPatch nowKEVEPSS 33.99%Apr 16, 2021
Critical9.8Yealink Device Management Server-Side Request Forgery (SSRF) VulnerabilityVuln · CVE-2021-27561 · Yealink · Device Management · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 82.86%Mar 15, 2021
Critical9.8Accellion FTA OS Command Injection VulnerabilityVuln · CVE-2021-27104 · Accellion · FTA · CISA KEV · CVE.org · FIRST EPSS · AccellionPatch nowKEVEPSS 56.69%Feb 16, 2021