Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

Critical9.3Craft CMS Code Injection VulnerabilityVuln · CVE-2024-56145 · Craft CMS · Craft CMS · CISA KEV · CVE.org · FIRST EPSS · Craft CMSPatch nowKEVEPSS 97.41%Dec 18, 2024
Critical9.8OSGeo GeoServer GeoTools Eval Injection VulnerabilityVuln · CVE-2024-36401 · OSGeo · GeoServer · CISA KEV · CVE.org · FIRST EPSS · GeoServerPatch nowKEVEPSS 99.81%Jul 1, 2024
Critical9.8Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityVuln · CVE-2024-23692 · Rejetto · HTTP File Server · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 99.48%May 31, 2024
Medium6.0Cisco ASA and FTD Privilege Escalation VulnerabilityVuln · CVE-2024-20359 · Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) · CERT-FR · CISA KEV · CVE.org · CiscoPatch nowKEVEPSS 19.43%Apr 24, 2024
Critical10.0CrushFTP VFS Sandbox Escape VulnerabilityVuln · CVE-2024-4040 · CrushFTP · CrushFTP · CISA KEV · CVE.org · FIRST EPSS · CrushFTPPatch nowKEVEPSS 99.54%Apr 19, 2024
High7.6Microsoft Windows SmartScreen Security Feature Bypass VulnerabilityVuln · CVE-2024-21351 · Microsoft · Windows · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 27.80%Feb 13, 2024
High8.8Citrix NetScaler ADC and NetScaler Gateway Code Injection VulnerabilityVuln · CVE-2023-6548 · Citrix · NetScaler ADC and NetScaler Gateway · CISA KEV · CVE.org · FIRST EPSS · CitrixPatch nowKEVEPSS 3.19%Jan 16, 2024
High7.8Spreadsheet::ParseExcel Remote Code Execution VulnerabilityVuln · CVE-2023-7101 · Spreadsheet::ParseExcel · Spreadsheet::ParseExcel · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 19.11%Dec 24, 2023
High7.2Trend Micro Apex One and Worry-Free Business Security Remote Code Execution VulnerabilityVuln · CVE-2023-41179 · Trend Micro · Apex One and Worry-Free Business Security · CISA KEV · CVE.org · FIRST EPSS · Trend MicroPatch nowKEVEPSS 4.25%Sep 19, 2023
Critical9.8Citrix NetScaler ADC and NetScaler Gateway Code Injection VulnerabilityVuln · CVE-2023-3519 · Citrix · NetScaler ADC and NetScaler Gateway · CISA KEV · CVE.org · FIRST EPSS · CitrixPatch nowKEVEPSS 99.75%Jul 18, 2023
Critical9.8Apache RocketMQ Command Execution VulnerabilityVuln · CVE-2023-33246 · Apache · RocketMQ · CISA KEV · CVE.org · FIRST EPSS · ApachePatch nowKEVEPSS 96.57%May 24, 2023
High7.2Microsoft SharePoint Server Code Injection VulnerabilityVuln · CVE-2023-24955 · Microsoft · SharePoint · CISA KEV · CVE.org · FIRST EPSS · Microsoft, SharePointPatch nowKEVEPSS 84.97%May 9, 2023
Critical9.8Novi Survey Insecure Deserialization VulnerabilityVuln · CVE-2023-29492 · Novi Survey · Novi Survey · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 2.69%Apr 10, 2023
High7.2Hitachi Vantara Pentaho BA Server Special Element Injection VulnerabilityVuln · CVE-2022-43769 · Hitachi Vantara · Pentaho Business Analytics (BA) Server · CISA KEV · CVE.org · FIRST EPSS · PentahoPatch nowKEVEPSS 97.67%Apr 3, 2023
Critical9.8Multiple Ruckus Wireless Products CSRF and RCE VulnerabilityVuln · CVE-2023-25717 · Ruckus Wireless · Multiple Products · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 98.07%Feb 13, 2023
High8.8Multiple SugarCRM Products Remote Code Execution VulnerabilityVuln · CVE-2023-22952 · SugarCRM · Multiple Products · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 80.14%Jan 4, 2023
Medium6.8Mitel MiVoice Connect Code Injection VulnerabilityVuln · CVE-2022-41223 · Mitel · MiVoice Connect · CISA KEV · CVE.org · FIRST EPSS · MitelPatch nowKEVEPSS 10.66%Nov 21, 2022
Critical9.8Sophos Firewall Code Injection VulnerabilityVuln · CVE-2022-3236 · Sophos · Firewall · CISA KEV · CVE.org · FIRST EPSS · SophosPatch nowKEVEPSS 98.88%Sep 16, 2022
Critical10.0OSGeo GeoServer JAI-EXT Code Injection VulnerabilityVuln · CVE-2022-24816 · OSGeo · JAI-EXT · CISA KEV · CVE.org · FIRST EPSS · GeoServerPatch nowKEVEPSS 99.91%Apr 13, 2022
Critical9.8VMware Workspace ONE Access and Identity Manager Server-Side Template Injection VulnerabilityVuln · CVE-2022-22954 · VMware · Workspace ONE Access and Identity Manager · CISA KEV · CVE.org · FIRST EPSS · VMwarePatch nowKEVEPSS 100.00%Apr 6, 2022
Critical9.8Spring Framework JDK 9+ Remote Code Execution VulnerabilityVuln · CVE-2022-22965 · VMware · Spring Framework · CISA KEV · CVE.org · FIRST EPSS · Cisco, JavaPatch nowKEVEPSS 99.64%Apr 1, 2022
Critical9.8VMware Tanzu Spring Cloud Function Remote Code Execution VulnerabilityVuln · CVE-2022-22963 · VMware · Spring Cloud · CISA KEV · CVE.org · FIRST EPSS · VMwarePatch nowKEVEPSS 99.94%Apr 1, 2022
Critical10.0VMware Spring Cloud Gateway Code Injection VulnerabilityVuln · CVE-2022-22947 · VMware · Spring Cloud Gateway · CISA KEV · CVE.org · FIRST EPSS · VMwarePatch nowKEVEPSS 98.25%Mar 3, 2022
Critical9.8Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection VulnerabilityVuln · CVE-2021-44529 · Ivanti · Endpoint Manager Cloud Service Appliance (EPM CSA) · CISA KEV · CVE.org · FIRST EPSS · IvantiPatch nowKEVEPSS 99.11%Dec 8, 2021
High8.5XStream Remote Code Execution VulnerabilityVuln · CVE-2021-39144 · XStream · XStream · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 98.12%Aug 23, 2021