Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.0Apache HTTP Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 100.00%Sep 16, 2021
- UnknownPHP-Fusion 9.03.50 downloads/downloads.php Authenticated Remote Code ExecutionPatch nowKEVEPSS 67.52%Sep 16, 2021
- UnknownPinterest Automatic plugin for WordPress Authorization BypassPatch nowKEVEPSS 4.49%Sep 6, 2021
- Critical9.1October CMS Improper AuthenticationPatch nowKEVEPSS 90.42%Aug 26, 2021
- UnknownWindows Remote Desktop Protocol (RDP) Information DisclosurePatch nowKEVEPSS 12.60%Aug 19, 2021
- UnknownZTE F460 and F660 Cable Modems web_shell_cmd.gch Security BypassPatch nowKEVEPSS 59.26%Aug 19, 2021
- Critical9.8ForgeRock Access Management (AM) Core Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Jul 22, 2021
- UnknownKaseya vsa Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 58.76%Jul 6, 2021
- Critical9.8Kaseya Virtual System/Server Administrator (VSA) Information Disclosure VulnerabilityPatch nowKEVEPSS 85.73%Jul 2, 2021
- Unknownacme mini_httpd Improper Input ValidationPatch nowKEVEPSS 10.19%Jun 24, 2021
- Critical9.8GitLab Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 53.37%Jun 11, 2021
- Unknownvestacp control_panel Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')Patch nowKEVEPSS 6.39%Jun 3, 2021
- UnknownWordPress REST API register_routes function in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php VulnerabilityPatch nowKEVEPSS 84.94%Jun 2, 2021
- Unknownmagmi_project magmi Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 14.72%Jun 1, 2021
- Critical9.8Tenda AC11 Router Stack Buffer Overflow VulnerabilityPatch nowKEVEPSS 86.51%May 7, 2021
- Critical9.8ASUS Routers Improper Authentication VulnerabilityPatch nowKEVEPSS 99.39%May 6, 2021
- Unknowncleantalk spam_protection\,_antispam\,_firewall Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.69%May 3, 2021
- Critical9.8Tenda g0_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 25.37%Apr 16, 2021
- UnknownApache Shiro with Spring Dynamic Controllers Authentication BypassPatch nowKEVEPSS 23.33%Apr 12, 2021
- UnknownApache olingo Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 12.25%Apr 12, 2021
- Unknownnevma adaptive_images Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 63.38%Apr 12, 2021
- UnknownApache Solr Deserialization of Untrusted DataPatch nowKEVEPSS 78.23%Apr 12, 2021
- Unknownjoomlaworks k2 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.31%Apr 12, 2021
- Unknownzh_baidumap_project zh_baidumap Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 57.70%Apr 12, 2021
- UnknownLinksys ea3500_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 4.01%Apr 12, 2021
Sort