Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownWPExperts post_smtp Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 90.34%Jan 10, 2024
- Unknownsygnoos popup_builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.00%Jan 10, 2024
- High8.2Ivanti Connect Secure and Policy Secure Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.98%Jan 10, 2024
- High7.0Apple Multiple Products Memory Corruption VulnerabilityPatch nowKEVEPSS 0.49%Jan 9, 2024
- Medium6.5Topaz Antifraud wsftprm.sys Kernel Driver Process TerminationPatch nowKEVEPSS 0.33%Jan 8, 2024
- High7.8Linux Kernel Use-After-Free VulnerabilityPatch nowKEVEPSS 10.20%Jan 8, 2024
- UnknownZKTeco zmm200_firmware Direct Request ('Forced Browsing')Patch nowKEVEPSS 5.16%Jan 6, 2024
- UnknownZoho manageengine_access_manager_plus Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 83.54%Jan 6, 2024
- UnknownZoho manageengine_opmanager Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 66.35%Jan 6, 2024
- Unknownseiko-sol skybridge_mb-a200_firmware Use of Hard-coded CredentialsPatch nowKEVEPSS 0.81%Jan 5, 2024
- Unknownproperfraction profilepress Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 6.74%Jan 5, 2024
- UnknownCisco SD-WAN vManage Software Directory Traversal VulnerabilityPatch nowKEVEPSS 12.58%Jan 5, 2024
- Unknownthimpress learnpress Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')Patch nowKEVEPSS 8.54%Jan 4, 2024
- UnknownD-Link central_wifimanager Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 44.10%Jan 4, 2024
- Unknownphpcollab phpcollab Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 96.39%Jan 4, 2024
- UnknownTOTOLINK a3002r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 4.20%Jan 3, 2024
- Unknownlinknet-usa lw-n605r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 42.66%Jan 3, 2024
- Unknownseagate nas_os Incorrect Permission Assignment for Critical ResourcePatch nowKEVEPSS 11.34%Jan 3, 2024
- Unknownjolokia webarchive_agent Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 73.71%Jan 3, 2024
- Unknowncambiumnetworks cnpilot_r190v_firmware Active Debug CodePatch nowKEVEPSS 33.25%Jan 3, 2024
- Unknownyaws yaws Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 81.16%Jan 3, 2024
- Unknownjqueryfiletree_project jqueryfiletree Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 59.06%Jan 3, 2024
- Unknowndaan omgf Missing AuthorizationPatch nowKEVEPSS 0.48%Jan 2, 2024
- UnknownApache OFBiz Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 96.00%Jan 2, 2024
- Unknownwavlink wn579x3_firmware Direct Request ('Forced Browsing')Patch nowKEVEPSS 6.55%Jan 2, 2024
Sort