Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownwavemaker wavemarker_studio Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 27.96%Sep 19, 2024
- UnknownAtlassian oauth Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 71.60%Sep 19, 2024
- Unknowndnnsoftware DotNetNuke (DNN) Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 12.54%Sep 19, 2024
- Unknownumbraco umbraco Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 11.15%Sep 19, 2024
- UnknownWordPress wordpress Time-of-check Time-of-use (TOCTOU) Race ConditionPatch nowKEVEPSS 3.43%Sep 18, 2024
- UnknownTenda f3_firmware Direct Request ('Forced Browsing')Patch nowKEVEPSS 35.25%Sep 18, 2024
- Critical9.1PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass VulnerabilityPatch nowKEVEPSS 58.79%Sep 17, 2024
- UnknownSonicWall SonicOS Stack-based Buffer OverflowPatch nowKEVEPSS 75.52%Sep 12, 2024
- High7.5Apache OFBiz Forced Browsing VulnerabilityPatch nowKEVEPSS 99.98%Sep 4, 2024
- Unknownjournyx journyx Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 32.92%Sep 4, 2024
- Critical10.0HP intelligent_management_center Deserialization of Untrusted DataPatch nowKEVEPSS 0.96%Aug 28, 2024
- UnknownD-Link DIR-825 R1 Devices Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 5.25%Aug 28, 2024
- Critical10.0Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.81%Aug 23, 2024
- UnknownLiteLLM Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 35.32%Aug 22, 2024
- UnknownSpring Security OAuth response_type Parameter VulnerabilityPatch nowKEVEPSS 79.18%Aug 14, 2024
- UnknownApache HTTP Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')Patch nowKEVEPSS 84.51%Jul 25, 2024
- UnknownParsec Automation TrackSYS 11.x.x /TS/export/pagedefinition VulnerabilityPatch nowKEVEPSS 2.04%Jul 24, 2024
- UnknownOSGeo GeoServer Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 68.45%Jul 22, 2024
- Unknownthinkadmin thinkadmin Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 75.33%Jul 21, 2024
- Unknownavertx hd838_firmware Observable DiscrepancyPatch nowKEVEPSS 1.38%Jul 16, 2024
- Critical9.9Gogs Gogs Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')Patch nowKEVEPSS 7.74%Jul 4, 2024
- Medium5.3Twilio Authy Information Disclosure VulnerabilityPatch nowKEVEPSS 1.67%Jul 2, 2024
- Critical9.8OSGeo GeoServer GeoTools Eval Injection VulnerabilityPatch nowKEVEPSS 99.81%Jul 1, 2024
- UnknownQuest kace_systems_management Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 9.55%Jun 29, 2024
- UnknownZyxel NAS setCookie Crafted HTTP POST VulnerabilityPatch nowKEVEPSS 86.20%Jun 24, 2024
Sort