Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Juniper Junos OS Path Traversal VulnerabilityPatch nowKEVEPSS 4.87%May 4, 2020
- Critical9.8Sophos SFOS SQL Injection VulnerabilityPatch nowKEVEPSS 42.43%Apr 22, 2020
- High7.5WordPress Snap Creek Duplicator Plugin File Download VulnerabilityPatch nowKEVEPSS 97.82%Apr 13, 2020
- High7.5Unraid Authentication Bypass VulnerabilityPatch nowKEVEPSS 93.24%Mar 16, 2020
- Critical9.8Sumavision EMR Cross-Site Request Forgery (CSRF) VulnerabilityPatch nowKEVEPSS 14.67%Mar 11, 2020
- High7.8D-Link DWL-2600AP Access Point Command Injection VulnerabilityPatch nowKEVEPSS 96.71%Mar 5, 2020
- Unknownwpdesk flexible_checkout_fields Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.34%Feb 27, 2020
- Unknowntbkvision tbk-dvr4216_firmware Improper AuthenticationPatch nowKEVEPSS 82.32%Feb 25, 2020
- Critical9.8EyesOfNetwork Use of Hard-Coded Credentials VulnerabilityPatch nowKEVEPSS 91.87%Feb 6, 2020
- High8.8Cisco IOS XR Software Discovery Protocol Format String VulnerabilityPatch nowKEVEPSS 11.68%Feb 5, 2020
- Unknownwebfactoryltd wp_database_reset Improper Privilege ManagementPatch nowKEVEPSS 2.46%Jan 16, 2020
- Unknownwebfactoryltd 301_redirects Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.86%Dec 19, 2019
- Critical9.8IBM Planning Analytics Remote Code Execution VulnerabilityPatch nowKEVEPSS 86.44%Dec 18, 2019
- Critical9.8Sangoma FreePBX Improper Authentication VulnerabilityPatch nowKEVEPSS 55.95%Nov 21, 2019
- Medium6.5Fortinet FortiOS Use of Hard-Coded Credentials VulnerabilityPatch nowKEVEPSS 6.64%Nov 21, 2019
- High8.8Nagios XI Remote Code Execution VulnerabilityPatch nowKEVEPSS 77.04%Sep 5, 2019
- High7.8Docker Desktop Community Edition Privilege Escalation VulnerabilityPatch nowKEVEPSS 48.63%Aug 28, 2019
- Critical9.8Atlassian Jira Server and Data Center Server-Side Template Injection VulnerabilityPatch nowKEVEPSS 84.62%Aug 9, 2019
- High7.2Apache Solr DataImportHandler Code Injection VulnerabilityPatch nowKEVEPSS 83.55%Aug 1, 2019
- Unknowndreambox opendreambox Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 21.84%Jun 13, 2019
- Unknownyuzopro yuzo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 4.48%May 9, 2019
- High7.2Ivanti Pulse Connect Secure and Policy Secure Command Injection VulnerabilityPatch nowKEVEPSS 98.54%Apr 25, 2019
- High8.8Atlassian Confluence Server and Data Center Path Traversal VulnerabilityPatch nowKEVEPSS 97.03%Apr 18, 2019
- Unknownyellowpencil visual_css_style_editor Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 1.89%Apr 11, 2019
- High7.2Reolink Multiple IP Cameras OS Command Injection VulnerabilityPatch nowKEVEPSS 37.54%Apr 8, 2019
Sort