Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownsubtlewebinc formcraft3 Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 20.25%Nov 14, 2023
- UnknownIgnite Realtime Openfire Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 32.30%Nov 14, 2023
- Unknownnetic group_export Missing AuthorizationPatch nowKEVEPSS 25.68%Nov 13, 2023
- UnknownSophos mobile Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 9.79%Nov 13, 2023
- Unknownpentasecurity wapples Use of Hard-coded CredentialsPatch nowKEVEPSS 17.98%Nov 13, 2023
- Unknowninglorion muhttpd Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 17.75%Nov 13, 2023
- Unknownroxy-wi roxy-wi Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 52.65%Nov 13, 2023
- Unknownhashicorp consul Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 8.75%Nov 13, 2023
- UnknownApache Druid 0.20.0 Remote Command ExecutionPatch nowKEVEPSS 99.00%Nov 13, 2023
- Unknownjellyfin jellyfin Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 79.31%Nov 13, 2023
- Unknownsearchblox searchblox Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 13.98%Nov 13, 2023
- Unknownagentejo cockpit Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 50.26%Nov 13, 2023
- Unknowndedecms dedecms Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 74.12%Nov 13, 2023
- UnknownElastic Kibana External Control of File Name or PathPatch nowKEVEPSS 82.25%Nov 13, 2023
- Critical9.8F5 BIG-IP Configuration Utility Authentication Bypass VulnerabilityPatch nowKEVEPSS 96.52%Oct 26, 2023
- Critical9.8NextGen Healthcare Mirth Connect Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 82.71%Oct 26, 2023
- High7.5North Grid Proself Improper Restriction of XML External Entity (XXE) Reference VulnerabilityPatch nowKEVEPSS 4.82%Oct 18, 2023
- UnknownWeaver e-cology Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.18%Oct 14, 2023
- High7.5HTTP/2 Rapid Reset Attack VulnerabilityPatch nowKEVEPSS 100.00%Oct 10, 2023
- High8.7Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 0.52%Sep 6, 2023
- Critical10.0D-Link dir-110_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 10.13%Sep 6, 2023
- Medium6.5Qlik Sense Path Traversal VulnerabilityPatch nowKEVEPSS 84.84%Aug 29, 2023
- Critical9.9Qlik Sense HTTP Tunneling VulnerabilityPatch nowKEVEPSS 88.22%Aug 29, 2023
- Medium5.3Juniper Junos OS SRX Series Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 1.12%Aug 29, 2023
- Medium5.3Juniper Junos OS EX Series Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 83.45%Aug 17, 2023
Sort