Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownunimo udr-ja1004_firmware Missing Authentication for Critical FunctionPatch nowKEVEPSS 1.70%Jun 19, 2024
- High8.7nsfocusglobal secgate3600_firmware Missing Authentication for Critical FunctionPatch nowKEVEPSS 8.08%Jun 18, 2024
- Unknownethyca fides Exposure of Sensitive System Information to an Unauthorized Control SpherePatch nowKEVEPSS 1.10%Jun 13, 2024
- Critical9.8Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityPatch nowKEVEPSS 99.48%May 31, 2024
- UnknownCisco AppDynamics Controller Directory Traversal VulnerabilityPatch nowKEVEPSS 2.15%May 10, 2024
- UnknownApache dubbo Deserialization of Untrusted DataPatch nowKEVEPSS 36.51%May 10, 2024
- UnknownLantronix premierwave_2050_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.06%May 7, 2024
- UnknownMStore API plugin for WordPress Add Listing REST API Authentication BypassPatch nowKEVEPSS 67.28%May 6, 2024
- Unknownpython python URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 4.53%May 6, 2024
- UnknownCode Unit4 Financials Cross Site Scripting VulnerabilityPatch nowKEVEPSS 1.79%Apr 27, 2024
- UnknownChatGPT pictureproxy.php Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 40.64%Apr 27, 2024
- Medium5.0CrushFTP CrushFTP Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 9.41%Apr 26, 2024
- Medium6.5vanquish woocommerce_customers_manager Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.32%Apr 24, 2024
- High8.6Cisco ASA and FTD Denial of Service VulnerabilityPatch nowKEVEPSS 70.69%Apr 24, 2024
- UnknownOpenMetadata SpEL Injection in PUT /api/v1/events/subscriptionsPatch nowKEVEPSS 2.37%Apr 17, 2024
- UnknownOpenMetadata Authentication BypassPatch nowKEVEPSS 73.26%Apr 17, 2024
- UnknownOpenMetadata SpEL Injection in PUT /api/v1/policiesPatch nowKEVEPSS 12.53%Apr 17, 2024
- UnknownFortinet fortiwlm Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 21.32%Apr 14, 2024
- Critical10.0Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 15.10%Apr 6, 2024
- UnknownNextChat Internal HTTP Endpoints SSRF and XSSPatch nowKEVEPSS 83.16%Apr 6, 2024
- Unknownruifang-tech rebuild Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 34.71%Apr 4, 2024
- Critical9.8D-Link Multiple NAS Devices Command Injection VulnerabilityPatch nowKEVEPSS 100.00%Apr 3, 2024
- Critical9.8D-Link Multiple NAS Devices Use of Hard-Coded Credentials VulnerabilityPatch nowKEVEPSS 98.11%Apr 3, 2024
- UnknownAtlassian Jira Server and Data Center Authentication Bypass VulnerabilityPatch nowKEVEPSS 88.06%Mar 30, 2024
- UnknownAutomatic <= 3.92.0 - Unauthenticated Arbitrary File Download and Server-Side Request ForgeryPatch nowKEVEPSS 72.77%Mar 29, 2024
Sort