Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownApache Axis2 dswsbobje.war Remote Code ExecutionPatch nowKEVEPSS 90.85%Nov 15, 2023
- UnknownNagios Nagios XI Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 42.05%Nov 14, 2023
- Unknownnetic group_export Missing AuthorizationPatch nowKEVEPSS 25.68%Nov 13, 2023
- UnknownVMware Workspace ONE Access, Identity Manager and vRealize Automation Authentication BypassPatch nowKEVEPSS 24.68%Nov 13, 2023
- Unknownphpgurukul dairy_farm_shop_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 19.25%Nov 13, 2023
- Unknownsearchblox searchblox Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 13.98%Nov 13, 2023
- Unknownsonarsource sonarqube Missing Authentication for Critical FunctionPatch nowKEVEPSS 15.97%Nov 13, 2023
- UnknownWSO2 api_manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 26.22%Nov 13, 2023
- UnknownSynacor Zimbra Collaboration Suite (ZCS) Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 86.31%Nov 13, 2023
- Critical9.8Atlassian Confluence Data Center and Server Improper Authorization VulnerabilityPatch nowKEVEPSS 100.00%Oct 31, 2023
- Critical9.8Atlassian Confluence Data Center and Server Broken Access Control VulnerabilityPatch nowKEVEPSS 99.22%Oct 4, 2023
- Medium6.6Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 2.48%Sep 27, 2023
- High7.2Trend Micro Apex One and Worry-Free Business Security Remote Code Execution VulnerabilityPatch nowKEVEPSS 4.25%Sep 19, 2023
- Critical9.8Cacti Cacti Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 88.79%Sep 5, 2023
- Critical9.8Ivanti Sentry Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.95%Aug 21, 2023
- High7.2Ivanti Endpoint Manager Mobile (EPMM) Path Traversal VulnerabilityPatch nowKEVEPSS 63.58%Jul 28, 2023
- High7.5Adobe ColdFusion Improper Access Control VulnerabilityPatch nowKEVEPSS 99.76%Jul 20, 2023
- UnknownRank Math seo Missing AuthorizationPatch nowKEVEPSS 9.11%Jul 19, 2023
- Unknownautomattic woocommerce_payments Improper AuthenticationPatch nowKEVEPSS 87.04%Jul 17, 2023
- High7.5Adobe ColdFusion Improper Access Control VulnerabilityPatch nowKEVEPSS 99.79%Jul 12, 2023
- Unknownthinkcmf thinkcmf Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 9.93%Jul 5, 2023
- UnknownThe Ultimate Member WordPress plugin before 2.6.7 Privilege EscalationPatch nowKEVEPSS 72.31%Jun 29, 2023
- UnknownLearnDash LMS plugin for WordPress Insecure Direct Object References VulnerabilityPatch nowKEVEPSS 2.23%Jun 27, 2023
- Unknownwp-experts protect_wp_admin URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 0.73%Jun 22, 2023
- Unknownapsystems ecu-r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 76.60%Jun 22, 2023
Sort