Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Hitachi Vantara Pentaho BA Server Authorization Bypass VulnerabilityPatch nowKEVEPSS 92.27%Apr 3, 2023
- High7.2Hitachi Vantara Pentaho BA Server Special Element Injection VulnerabilityPatch nowKEVEPSS 97.67%Apr 3, 2023
- UnknownTwitter Recommendation Algorithm Manipulation VulnerabilityPatch nowKEVEPSS 1.09%Apr 3, 2023
- UnknownHappyFiles Pro Arbitrary File Deletion VulnerabilityPatch nowKEVEPSS 0.40%Apr 3, 2023
- Unknown3CX DesktopApp through 18.12.416 Embedded Malicious CodePatch nowKEVEPSS 4.37%Mar 29, 2023
- UnknownHappyFiles Pro Authorization Bypass VulnerabilityPatch nowKEVEPSS 0.24%Mar 29, 2023
- High8.8Apple Multiple Products WebKit Memory Corruption VulnerabilityPatch nowKEVEPSS 22.95%Mar 27, 2023
- Critical9.8Fortra Cobalt Strike User Interface Remote Code Execution VulnerabilityPatch nowKEVEPSS 2.71%Mar 24, 2023
- Critical9.8Adobe ColdFusion Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 16.99%Mar 23, 2023
- UnknownRed Hat JBoss Application Server Deserialization of Untrusted DataPatch nowKEVEPSS 38.88%Mar 23, 2023
- High8.8MinIO Security Feature Bypass VulnerabilityPatch nowKEVEPSS 7.92%Mar 22, 2023
- High7.5MinIO Information Disclosure VulnerabilityPatch nowKEVEPSS 83.96%Mar 22, 2023
- High7.8Linux Kernel Improper Ownership Management VulnerabilityPatch nowKEVEPSS 7.88%Mar 22, 2023
- Unknowngeneralbytes crypto_application_server Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 20.61%Mar 21, 2023
- Unknowntshirtecommerce custom_product_designer Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.30%Mar 21, 2023
- Unknowntshirtecommerce custom_product_designer Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.30%Mar 21, 2023
- Low3.3Arm Mali GPU Kernel Driver Information Disclosure VulnerabilityPatch nowKEVEPSS 1.22%Mar 21, 2023
- UnknownBeRocket Plugins for WordPress Authorization BypassPatch nowKEVEPSS 0.23%Mar 21, 2023
- UnknownStrapi Strapi Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 54.08%Mar 21, 2023
- UnknownStrapi Strapi Weak Password Recovery Mechanism for Forgotten PasswordPatch nowKEVEPSS 97.64%Mar 21, 2023
- Unknownqbittorrent qbittorrent Use of Default CredentialsPatch nowKEVEPSS 1.24%Mar 19, 2023
- UnknownSquirrly SEO Squirrly SEO Plugin Missing Authorization VulnerabilityPatch nowKEVEPSS 0.40%Mar 17, 2023
- Critical9.8D-Link DIR-820 Router OS Command Injection VulnerabilityPatch nowKEVEPSS 97.86%Mar 15, 2023
- Critical9.8Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 68.08%Mar 15, 2023
- High8.8TP-Link Archer AX-21 Command Injection VulnerabilityPatch nowKEVEPSS 100.00%Mar 15, 2023
Sort