Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownVMware ESXi, Workstation, and Fusion UHCI USB Controller VulnerabilityPatch nowKEVEPSS 2.31%Oct 11, 2024
- UnknownVMware ESXi Out-of-bounds Write VulnerabilityPatch nowKEVEPSS 0.50%Oct 11, 2024
- Critical9.2Palo Alto Networks Expedition SQL Injection VulnerabilityPatch nowKEVEPSS 99.63%Oct 9, 2024
- Critical9.9Palo Alto Networks Expedition OS Command Injection VulnerabilityPatch nowKEVEPSS 98.55%Oct 9, 2024
- Critical9.8Microsoft Configuration Manager SQL Injection VulnerabilityPatch nowKEVEPSS 81.04%Oct 8, 2024
- High7.2Ivanti Cloud Services Appliance (CSA) OS Command Injection VulnerabilityPatch nowKEVEPSS 59.65%Oct 8, 2024
- High7.2Ivanti Cloud Services Appliance (CSA) SQL Injection VulnerabilityPatch nowKEVEPSS 43.78%Oct 8, 2024
- High8.1Microsoft Windows MSHTML Platform Spoofing VulnerabilityPatch nowKEVEPSS 46.11%Oct 8, 2024
- High7.8Microsoft Windows Management Console Remote Code Execution VulnerabilityPatch nowKEVEPSS 66.70%Oct 8, 2024
- UnknownOracle WebLogic Server Core Component T3/IIOP Unauthenticated VulnerabilityPatch nowKEVEPSS 0.87%Oct 8, 2024
- UnknownpgAdmin 4 OAuth2 Authentication Bypass VulnerabilityPatch nowKEVEPSS 9.69%Oct 7, 2024
- UnknownASUS Router Authentication Bypass VulnerabilityPatch nowKEVEPSS 43.46%Oct 4, 2024
- UnknownFlowiseAI Flowise Improper AuthenticationPatch nowKEVEPSS 45.05%Sep 29, 2024
- Critical9.3ScienceLogic SL1 Unspecified VulnerabilityPatch nowKEVEPSS 3.83%Sep 28, 2024
- UnknownCups-browsed INADDR_ANY IPP Request VulnerabilityPatch nowKEVEPSS 50.60%Sep 27, 2024
- UnknownGradio save_url_to_cache Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 37.11%Sep 25, 2024
- Critical9.1Ivanti Cloud Services Appliance (CSA) Path Traversal VulnerabilityPatch nowKEVEPSS 98.61%Sep 19, 2024
- Unknownmaianscriptworld maian_cart Missing AuthorizationPatch nowKEVEPSS 66.43%Sep 19, 2024
- Unknowncraftcms Craft CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 72.82%Sep 19, 2024
- Unknownicewarp mail_server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 5.34%Sep 19, 2024
- UnknownJenkins github Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 90.89%Sep 19, 2024
- UnknownAndroid Nexus 5 Qualcomm Components Elevation of Privilege VulnerabilityPatch nowKEVEPSS 0.48%Sep 19, 2024
- Unknownmarketo_ma_project marketo_ma Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.95%Sep 19, 2024
- Unknowngecad axigen_free_mail_server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 85.36%Sep 19, 2024
- Unknownsquirrelmail address_add_plugin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 3.44%Sep 19, 2024
Sort