Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Atlassian Crowd and Crowd Data Center Remote Code Execution VulnerabilityPatch nowKEVEPSS 95.36%Jun 3, 2019
- High8.8Sitecore CMS and Experience Platform (XP) Deserialization VulnerabilityPatch nowKEVEPSS 13.79%May 31, 2019
- Critical9.8Sitecore CMS and Experience Platform (XP) Deserialization VulnerabilityPatch nowKEVEPSS 83.74%May 31, 2019
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 7.44%May 29, 2019
- Critical9.8Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 99.99%May 29, 2019
- Medium6.5Fortinet FortiOS and FortiProxy Out-of-bounds WritePatch nowKEVEPSS 33.65%May 29, 2019
- Critical9.8Schneider Electric U.motion Builder SQL Injection VulnerabilityPatch nowKEVEPSS 72.67%May 22, 2019
- Critical9.8Citrix Workspace Application and Receiver for Windows Remote Code Execution VulnerabilityPatch nowKEVEPSS 8.09%May 22, 2019
- UnknownVMware Spring Framework Improper Input ValidationPatch nowKEVEPSS 74.53%May 20, 2019
- High8.8Microsoft GDI Remote Code Execution VulnerabilityPatch nowKEVEPSS 21.71%May 16, 2019
- Critical9.8Microsoft Remote Desktop Services Remote Code Execution VulnerabilityPatch nowKEVEPSS 100.00%May 16, 2019
- Unknown3cx live_chat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.21%May 15, 2019
- Critical9.8LG N1A1 NAS Remote Command Execution VulnerabilityPatch nowKEVEPSS 89.35%May 14, 2019
- High7.8Microsoft Windows Error Reporting (WER) Privilege Escalation VulnerabilityPatch nowKEVEPSS 5.21%May 14, 2019
- Critical9.8WhatsApp VOIP Stack Buffer Overflow VulnerabilityPatch nowKEVEPSS 30.08%May 13, 2019
- Unknownyuzopro yuzo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 4.48%May 9, 2019
- High8.8Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 27.26%May 6, 2019
- Critical9.8Zyxel P660HN-T1A Routers Command Injection VulnerabilityPatch nowKEVEPSS 94.51%May 2, 2019
- UnknownOracle communications_diameter_signaling_router Improper Access ControlPatch nowKEVEPSS 88.83%May 1, 2019
- Critical10.0Ivanti Pulse Connect Secure Arbitrary File Read VulnerabilityPatch nowKEVEPSS 100.00%May 1, 2019
- Critical9.8Crestron Multiple Products Command Injection VulnerabilityPatch nowKEVEPSS 98.95%Apr 30, 2019
- High7.5Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 81.04%Apr 30, 2019
- Critical9.8Oracle WebLogic Server, InjectionPatch nowKEVEPSS 99.98%Apr 26, 2019
- High7.2Ivanti Pulse Connect Secure and Policy Secure Command Injection VulnerabilityPatch nowKEVEPSS 98.54%Apr 25, 2019
- High7.2Oracle BI Publisher Unauthorized Access VulnerabilityPatch nowKEVEPSS 92.18%Apr 23, 2019