Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Microsoft Windows SmartScreen Security Feature Bypass VulnerabilityPatch nowKEVEPSS 88.09%Nov 14, 2023
- UnknownVMware cloud_director Missing Authentication for Critical FunctionPatch nowKEVEPSS 1.34%Nov 14, 2023
- UnknownDynamicweb Logic Flaw Leading to Remote Code ExecutionPatch nowKEVEPSS 39.82%Nov 14, 2023
- Unknownwavlink wl-wn535k2 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 79.30%Nov 14, 2023
- Unknownreputeinfosystems pricing_table Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 13.45%Nov 14, 2023
- Unknownsubtlewebinc formcraft3 Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 20.25%Nov 14, 2023
- UnknownD-Link DIR-825 R1 Devices Improper AuthenticationPatch nowKEVEPSS 56.06%Nov 14, 2023
- UnknownGitLab CE/EE 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2 Unauthenticated User EnumerationPatch nowKEVEPSS 80.00%Nov 14, 2023
- Unknownnodered node-red-dashboard Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 18.85%Nov 14, 2023
- UnknownRocket.Chat server 3.11, 3.12 & 3.13 Remote Code ExecutionPatch nowKEVEPSS 95.24%Nov 14, 2023
- UnknownCitrix xenmobile_server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 43.93%Nov 14, 2023
- Unknownyouphptube youphptube_encoder Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 38.53%Nov 14, 2023
- UnknownIgnite Realtime Openfire Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 32.30%Nov 14, 2023
- Unknownflowpaper flexpaper Improper Input ValidationPatch nowKEVEPSS 52.54%Nov 14, 2023
- UnknownNagios Nagios XI Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 41.44%Nov 14, 2023
- UnknownMetabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 Unauthenticated Command ExecutionPatch nowKEVEPSS 99.58%Nov 13, 2023
- Unknownwelcart welcart_e-commerce Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 5.75%Nov 13, 2023
- UnknownIWS WordPress plugin through 1.0 SQL InjectionPatch nowKEVEPSS 5.01%Nov 13, 2023
- Unknowncontec solarview_compact Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 31.19%Nov 13, 2023
- Unknownpluginus inpost_gallery Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 10.18%Nov 13, 2023
- UnknownJoomSport WordPress plugin before 5.2.8 SQL InjectionPatch nowKEVEPSS 5.09%Nov 13, 2023
- Unknownmicrochip syncserver_s650_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 92.47%Nov 13, 2023
- Unknownraspap raspap Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 99.06%Nov 13, 2023
- Unknownnetic group_export Missing AuthorizationPatch nowKEVEPSS 25.68%Nov 13, 2023
- UnknownSophos mobile Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 9.79%Nov 13, 2023
Sort