Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownmetagauss registrationmagic Improper AuthenticationPatch nowKEVEPSS 6.84%Dec 8, 2021
- High7.5Grafana Path Traversal VulnerabilityPatch nowKEVEPSS 88.50%Dec 7, 2021
- High7.8Fortinet FortiOS Arbitrary File DownloadPatch nowKEVEPSS 0.86%Dec 7, 2021
- Critical9.0Apache Log4j2 Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.98%Dec 6, 2021
- Critical10.0Apache Log4j2 Remote Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Dec 6, 2021
- Unknownpublishpress capabilities Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 6.69%Dec 6, 2021
- Critical9.8Ajax.NET Professional Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 82.58%Dec 3, 2021
- UnknownEdgewater Networks Edgemarc HTTP web-management Command ExecutionPatch nowKEVEPSS 46.85%Nov 30, 2021
- Unknownw3eden download_manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.62%Nov 29, 2021
- Critical9.8Zoho ManageEngine ServiceDesk Plus Remote Code Execution VulnerabilityPatch nowKEVEPSS 93.30%Nov 28, 2021
- Unknownaccesspressthemes access_demo_importer Improper AuthorizationPatch nowKEVEPSS 1.71%Nov 28, 2021
- Critical9.8Roundcube Webmail SQL Injection VulnerabilityPatch nowKEVEPSS 69.88%Nov 18, 2021
- High7.5Metabase GeoJSON API Local File Inclusion VulnerabilityPatch nowKEVEPSS 97.18%Nov 17, 2021
- Unknownwpwax directorist Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.84%Nov 16, 2021
- Unknownwebnus modern_events_calendar_lite Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 72.80%Nov 15, 2021
- Unknowngpononu 1ge_router_wifi_onu_v2801rw_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 45.72%Nov 11, 2021
- UnknownTOTOLINK a3002ru Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 25.14%Nov 11, 2021
- High8.3Linksys x3000 firmware ping_ip command injectionPatch nowKEVEPSS 63.11%Nov 11, 2021
- High7.5Microsoft Active Directory Domain Services Privilege Escalation VulnerabilityPatch nowKEVEPSS 77.17%Nov 9, 2021
- High7.5Microsoft Active Directory Domain Services Privilege Escalation VulnerabilityPatch nowKEVEPSS 73.30%Nov 9, 2021
- Medium5.5Microsoft Windows Installer Privilege Escalation VulnerabilityPatch nowKEVEPSS 19.45%Nov 9, 2021
- High8.8Microsoft Exchange Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 91.74%Nov 9, 2021
- High7.8Microsoft Excel Security Feature BypassPatch nowKEVEPSS 43.00%Nov 9, 2021
- Unknownroundupwp registrations_for_the_events_calendar Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 7.30%Nov 8, 2021
- High7.8Android Kernel Use-After-Free VulnerabilityPatch nowKEVEPSS 1.06%Nov 6, 2021