Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownanyscale ray Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 83.94%Mar 26, 2024
- UnknownIBM operational_decision_manager Deserialization of Untrusted DataPatch nowKEVEPSS 73.40%Mar 22, 2024
- UnknownGrafana Labs Grafana Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 99.86%Mar 7, 2024
- UnknownTOTOLINK a3002ru Improper AuthenticationPatch nowKEVEPSS 29.56%Feb 23, 2024
- Critical10.0Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.81%Feb 15, 2024
- UnknownSAP businessobjects_business_intelligence_platform Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 61.74%Feb 14, 2024
- Critical9.8Fortinet FortiOS Out-of-Bound Write VulnerabilityPatch nowKEVEPSS 83.43%Feb 8, 2024
- UnknownTOTOLINK a3002ru Improper Input ValidationPatch nowKEVEPSS 1.55%Feb 5, 2024
- Unknowncookieinformation wp-gdpr-compliance Missing AuthorizationPatch nowKEVEPSS 1.46%Jan 29, 2024
- UnknownFortra GoAnywhere MFT Direct Request ('Forced Browsing')Patch nowKEVEPSS 95.09%Jan 25, 2024
- Unknownlikeshop likeshop Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 72.92%Jan 22, 2024
- Unknownh2o h2o Missing AuthorizationPatch nowKEVEPSS 4.34%Jan 22, 2024
- Unknownreadtomyshoe_project readtomyshoe Generation of Error Message Containing Sensitive InformationPatch nowKEVEPSS 3.86%Jan 22, 2024
- Unknownopenautomationsoftware oas_platform Missing Authentication for Critical FunctionPatch nowKEVEPSS 37.64%Jan 22, 2024
- Unknownapereo central_authentication_service Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 8.19%Jan 22, 2024
- Unknownonline-shopping-system-advanced_project online-shopping-system-advanced Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 51.77%Jan 22, 2024
- UnknownOSGeo GeoServer Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 19.26%Jan 22, 2024
- UnknownSAP NetWeaver Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 69.08%Jan 22, 2024
- Unknownsfcyazilim sonlogger Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 47.52%Jan 22, 2024
- UnknownLumis lumis_experience_platform Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 18.13%Jan 22, 2024
- Unknownvoid aurall_rec_monitor Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 12.25%Jan 22, 2024
- Unknowncars-seller-auto-classifieds-script_project cars-seller-auto-classifieds-script Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 14.70%Jan 22, 2024
- UnknownZTE mf971r_firmware Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 55.71%Jan 22, 2024
- Unknowninstructure canvas_learning_management_service Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 6.59%Jan 22, 2024
- Unknownqcubed qcubed Deserialization of Untrusted DataPatch nowKEVEPSS 4.98%Jan 22, 2024
Sort