Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8SonicWall Email Security Improper Privilege Management VulnerabilityPatch nowKEVEPSS 88.78%Apr 9, 2021
- Unknownsupervisord supervisor Incorrect Default PermissionsPatch nowKEVEPSS 87.38%Apr 8, 2021
- High8.8Google Chromium Blink Use-After-Free VulnerabilityPatch nowKEVEPSS 9.31%Apr 7, 2021
- High8.8Apple Multiple Products Type Confusion VulnerabilityPatch nowKEVEPSS 13.98%Apr 2, 2021
- Unknownaivahthemes business_hours_pro Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.04%Apr 2, 2021
- Critical9.8F5 BIG-IP Traffic Management Microkernel Buffer OverflowPatch nowKEVEPSS 61.06%Mar 31, 2021
- High7.5VMware Server Side Request Forgery in vRealize Operations Manager APIPatch nowKEVEPSS 78.00%Mar 31, 2021
- Critical9.8F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.90%Mar 31, 2021
- High7.5Micro Focus Access Manager Information Leakage VulnerabilityPatch nowKEVEPSS 25.70%Mar 26, 2021
- Medium6.1Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 7.08%Mar 26, 2021
- Unknownthrivethemes focusblog Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.95%Mar 24, 2021
- Unknownthrivethemes focusblog Improper Access ControlPatch nowKEVEPSS 2.06%Mar 24, 2021
- UnknownWooCommerce help_scout Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 7.91%Mar 21, 2021
- Unknownelementor Website Builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.75%Mar 17, 2021
- Unknownelementor Website Builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.75%Mar 17, 2021
- Unknownelementor Website Builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.75%Mar 17, 2021
- Unknownflothemes flo_forms Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.67%Mar 16, 2021
- Medium5.5Arm Trusted Firmware Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 3.06%Mar 15, 2021
- Critical9.8Yealink Device Management Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 82.86%Mar 15, 2021
- UnknownThemeum tutor_lms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.25%Mar 15, 2021
- UnknownThemeum tutor_lms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.74%Mar 15, 2021
- High8.8Microsoft Internet Explorer Remote Code Execution VulnerabilityPatch nowKEVEPSS 5.45%Mar 11, 2021
- High7.6Microsoft Office Remote Code Execution VulnerabilityPatch nowKEVEPSS 6.08%Mar 11, 2021
- High8.8Microsoft Internet Explorer Memory Corruption VulnerabilityPatch nowKEVEPSS 81.67%Mar 9, 2021
- High8.8Google Chromium Blink Use-After-Free VulnerabilityPatch nowKEVEPSS 9.95%Mar 9, 2021