Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Apple iOS and macOS Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 3.29%Aug 17, 2022
- High8.8Apple iOS and macOS Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 9.93%Aug 17, 2022
- UnknownMozilla Firefox Out-of-bounds WritePatch nowKEVEPSS 2.56%Aug 15, 2022
- UnknownMozilla Firefox Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Patch nowKEVEPSS 26.71%Aug 15, 2022
- UnknownMozilla Firefox Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Patch nowKEVEPSS 17.10%Aug 15, 2022
- UnknownMozilla Firefox Use After FreePatch nowKEVEPSS 0.92%Aug 15, 2022
- Unknownomron nx701-1600_firmware Use of Hard-coded CredentialsPatch nowKEVEPSS 1.26%Aug 13, 2022
- Critical9.8Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass VulnerabilityPatch nowKEVEPSS 91.89%Aug 10, 2022
- UnknownVMware vRealize Operations Authentication BypassPatch nowKEVEPSS 0.83%Aug 10, 2022
- High8.6Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service VulnerabilityPatch nowKEVEPSS 2.54%Aug 10, 2022
- High7.8Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityPatch nowKEVEPSS 67.76%Aug 9, 2022
- Unknownideastocode Enable SVG, WebP, and ICO Upload Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.28%Aug 1, 2022
- UnknownWeaver e-cology Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.36%Jul 28, 2022
- Unknownslickremix feed_them_social Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 6.01%Jul 26, 2022
- Unknowntransposh transposh_wordpress_translation Missing AuthorizationPatch nowKEVEPSS 4.79%Jul 25, 2022
- Unknownprestashop prestashop Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 6.72%Jul 22, 2022
- Critical9.8Atlassian Questions For Confluence App Hard-coded Credentials VulnerabilityPatch nowKEVEPSS 98.24%Jul 20, 2022
- UnknownGoogle Chrome Improper Input ValidationPatch nowKEVEPSS 1.14%Jul 20, 2022
- Critical9.8Zoho ManageEngine Multiple Products Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.92%Jul 19, 2022
- Medium6.5Google Chromium Intents Insufficient Input Validation VulnerabilityPatch nowKEVEPSS 4.56%Jul 19, 2022
- High8.8Apache Spark Command Injection VulnerabilityPatch nowKEVEPSS 93.24%Jul 18, 2022
- Unknownautomationdirect d0-06dd1_firmware Cleartext Transmission of Sensitive InformationPatch nowKEVEPSS 0.73%Jul 14, 2022
- High7.8Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation VulnerabilityPatch nowKEVEPSS 18.77%Jul 12, 2022
- Critical9.8varktech pricing_deals_for_woocommerce Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 8.01%Jul 11, 2022
- High7.8An issue was discovered in the Linux kernel through 5.18.9.Patch nowKEVEPSS 5.45%Jul 4, 2022