Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.6Microsoft Windows NTFS Information Disclosure VulnerabilityPatch nowKEVEPSS 1.99%Mar 11, 2025
- High7.0Microsoft Windows Win32k Use-After-Free VulnerabilityPatch nowKEVEPSS 1.38%Mar 11, 2025
- Critical10.0Apple Multiple Products WebKit Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 3.85%Mar 11, 2025
- UnknownIcegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin 'IG_ES_Subscribers_Query' Class SQL InjectionPatch nowKEVEPSS 80.60%Mar 11, 2025
- Unknownpluginus husky_-_products_filter_professional_for_woocommerce Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 56.38%Mar 10, 2025
- Unknownsfwebservice injob Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.50%Mar 7, 2025
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.43%Mar 5, 2025
- Critical9.3Edimax IC-7100 IP Camera OS Command Injection VulnerabilityPatch nowKEVEPSS 74.48%Mar 4, 2025
- Medium6.0VMware ESXi, Workstation, and Fusion Information Disclosure VulnerabilityPatch nowKEVEPSS 1.77%Mar 4, 2025
- High8.2VMware ESXi Arbitrary Write VulnerabilityPatch nowKEVEPSS 1.02%Mar 4, 2025
- High8.2VMware ESXi and Workstation TOCTOU Race Condition VulnerabilityPatch nowKEVEPSS 1.56%Mar 4, 2025
- UnknownParagon Partition Manager MappedSystemVa Pointer VulnerabilityPatch nowKEVEPSS 0.34%Feb 28, 2025
- Unknownwpswings woocommerce_ultimate_gift_card Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 4.08%Feb 27, 2025
- UnknownLinux Kernel Improper LockingPatch nowKEVEPSS 0.18%Feb 27, 2025
- Unknowndahuasecurity dvr Improper AuthenticationPatch nowKEVEPSS 69.68%Feb 27, 2025
- Critical9.8XWiki Platform Eval Injection VulnerabilityPatch nowKEVEPSS 99.86%Feb 20, 2025
- UnknownOracle WebLogic Server Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.82%Feb 13, 2025
- UnknownPostgreSQL Quoting APIs SQL Injection VulnerabilityPatch nowKEVEPSS 90.03%Feb 13, 2025
- High8.8Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityPatch nowKEVEPSS 98.45%Feb 12, 2025
- UnknownTOTOLINK a3300r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.17%Feb 12, 2025
- UnknownTOTOLINK a3300r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.17%Feb 12, 2025
- High8.1Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityPatch nowKEVEPSS 7.23%Feb 11, 2025
- High7.8Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 1.57%Feb 11, 2025
- High7.1Microsoft Windows Storage Link Following VulnerabilityPatch nowKEVEPSS 2.28%Feb 11, 2025
- Critical9.9Wazuh Server Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 93.84%Feb 10, 2025
Sort