Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8SonicWall Email Security Improper Privilege Management VulnerabilityPatch nowKEVEPSS 88.78%Apr 9, 2021
- Unknownsupervisord supervisor Incorrect Default PermissionsPatch nowKEVEPSS 87.55%Apr 8, 2021
- Critical9.8F5 BIG-IP Traffic Management Microkernel Buffer OverflowPatch nowKEVEPSS 61.06%Mar 31, 2021
- High7.5VMware Server Side Request Forgery in vRealize Operations Manager APIPatch nowKEVEPSS 78.00%Mar 31, 2021
- Unknownelementor Website Builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.75%Mar 17, 2021
- Unknownelementor Website Builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.75%Mar 17, 2021
- Unknownelementor Website Builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.75%Mar 17, 2021
- Critical9.8Yealink Device Management Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 82.86%Mar 15, 2021
- UnknownThemeum tutor_lms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.25%Mar 15, 2021
- UnknownThemeum tutor_lms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.74%Mar 15, 2021
- Medium5.3VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 88.01%Feb 24, 2021
- Critical9.8Accellion FTA OS Command Injection VulnerabilityPatch nowKEVEPSS 56.69%Feb 16, 2021
- Critical9.8Accellion FTA Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 11.41%Feb 16, 2021
- Critical9.8Accellion FTA SQL Injection VulnerabilityPatch nowKEVEPSS 6.00%Feb 16, 2021
- High8.8Nagios XI OS Command InjectionPatch nowKEVEPSS 73.64%Feb 15, 2021
- High8.8Nagios XI OS Command InjectionPatch nowKEVEPSS 56.66%Feb 15, 2021
- High8.8Nagios XI OS Command InjectionPatch nowKEVEPSS 71.94%Feb 15, 2021
- High7.2Adminer Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 98.46%Feb 11, 2021
- UnknownMicrosoft SharePoint Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 4.42%Jan 21, 2021
- UnknownJQuery JQuery Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 29.73%Jan 21, 2021
- UnknownRed Hat cloudforms Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 26.72%Dec 28, 2020
- UnknownrConfig rConfig Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 71.64%Dec 14, 2020
- Unknownwp-ecommerce easy_wp_smtp Insertion of Sensitive Information into Log FilePatch nowKEVEPSS 60.38%Dec 13, 2020
- Unknowngvectors wpdiscuz Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 12.61%Dec 6, 2020
- Unknownbeckhoff ipc_diagnostics Improper Access ControlPatch nowKEVEPSS 5.74%Dec 1, 2020
Sort