Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2Ivanti Pulse Connect Secure Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 14.15%May 27, 2021
- High8.8Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow VulnerabilityPatch nowKEVEPSS 41.28%May 27, 2021
- High7.2Command Injection in lodashCheck this weekEPSS 21.33%May 6, 2021
- Critical10.0GitLab Community and Enterprise Editions Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.73%Apr 23, 2021
- High7.8ExifTool Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.98%Apr 23, 2021
- High7.2Ivanti Pulse Connect Secure Code Execution VulnerabilityPatch nowKEVEPSS 90.76%Sep 30, 2020
- High7.2Pulse Connect Secure Code Injection VulnerabilityPatch nowKEVEPSS 32.25%Jul 30, 2020
- Critical9.8PlaySMS Server-Side Template Injection VulnerabilityPatch nowKEVEPSS 86.69%Feb 5, 2020
- Critical9.9MongoDB mongo-express Remote Code Execution VulnerabilityPatch nowKEVEPSS 84.73%Dec 24, 2019
- Critical9.8IBM Planning Analytics Remote Code Execution VulnerabilityPatch nowKEVEPSS 86.44%Dec 18, 2019
- Critical9.8vBulletin PHP Module Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.73%Sep 24, 2019
- High7.2Apache Solr DataImportHandler Code Injection VulnerabilityPatch nowKEVEPSS 83.55%Aug 1, 2019
- High7.8A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl <= 7.65.1 automatically run th…Check if you run itEPSS 0.69%Jul 2, 2019
- Critical10.0Kibana Arbitrary Code ExecutionPatch nowKEVEPSS 95.34%Mar 25, 2019
- High8.8ThinkPHP Remote Code Execution VulnerabilityPatch nowKEVEPSS 97.42%Jan 13, 2019
- Critical9.8Red Hat JBoss RichFaces Framework Expression Language Injection VulnerabilityPatch nowKEVEPSS 74.20%Nov 6, 2018
- Critical9.8Drupal Core Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.17%Jul 19, 2018
- Critical9.8VMware Tanzu Spring Data Commons Property Binder VulnerabilityPatch nowKEVEPSS 96.96%Apr 11, 2018
- High7.8Microsoft .NET Framework Remote Code Execution VulnerabilityPatch nowKEVEPSS 88.70%Sep 12, 2017
- High8.8DotNetNuke (DNN) Remote Code Execution VulnerabilityPatch nowKEVEPSS 94.79%Jul 20, 2017
- Critical9.8PHPUnit Command Injection VulnerabilityPatch nowKEVEPSS 100.00%Jun 27, 2017
- Critical9.8Samba Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.45%May 30, 2017
- Critical9.8IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.Patch nowKEVEPSS 97.76%Jan 2, 2016
- Critical9.8Microsoft HTTP.sys Remote Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Apr 14, 2015
- High7.8Microsoft Windows Code Injection VulnerabilityPatch nowKEVEPSS 77.48%Oct 22, 2014