Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownD-Link dar-7000_firmware Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 30.51%Aug 6, 2024
- Critical9.3RoundCube Webmail Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 82.88%Aug 5, 2024
- High7.8Qualcomm Multiple Chipsets Use-After-Free VulnerabilityPatch nowKEVEPSS 0.67%Jul 29, 2024
- UnknownTP-Link tl-wr840n_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 36.47%Jul 25, 2024
- UnknownTalend ESB Runtime Unauthenticated Jolokia HTTP Endpoint VulnerabilityPatch nowKEVEPSS 1.25%Jul 25, 2024
- UnknownVMware vrealize_operations_for_horizon Incorrect AuthorizationPatch nowKEVEPSS 0.50%Jul 25, 2024
- Unknowngrupposcai realgimm Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.12%Jul 24, 2024
- UnknownServiceNow Washington DC, Vancouver, and Utah Now Platform Administrative User Information Disclosure VulnerabilityPatch nowKEVEPSS 33.59%Jul 23, 2024
- Unknownredux gutenberg_template_library_\&_redux_framework Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.03%Jul 22, 2024
- UnknownOSGeo GeoServer Improper Input ValidationPatch nowKEVEPSS 1.56%Jul 16, 2024
- Unknownavertx hd838_firmware Observable DiscrepancyPatch nowKEVEPSS 1.38%Jul 16, 2024
- UnknownUnauthenticated Privilege Escalation in Profile-Builder pluginPatch nowKEVEPSS 0.80%Jul 15, 2024
- UnknownThinkPHP '_filename' in index.php Remote Code ExecutionPatch nowKEVEPSS 2.02%Jul 15, 2024
- Critical9.3Palo Alto Networks Expedition Missing Authentication VulnerabilityPatch nowKEVEPSS 91.68%Jul 10, 2024
- High7.2Microsoft SharePoint Deserialization VulnerabilityPatch nowKEVEPSS 50.89%Jul 9, 2024
- High7.5Microsoft Windows MSHTML Platform Spoofing VulnerabilityPatch nowKEVEPSS 84.23%Jul 9, 2024
- High7.8Microsoft Windows Hyper-V Privilege Escalation VulnerabilityPatch nowKEVEPSS 7.12%Jul 9, 2024
- UnknownF-Logic DataCube3 req_id SQL InjectionPatch nowKEVEPSS 19.27%Jul 3, 2024
- Medium5.3Twilio Authy Information Disclosure VulnerabilityPatch nowKEVEPSS 1.67%Jul 2, 2024
- High7.5FlowiseAI Flowise Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 1.78%Jul 1, 2024
- Critical9.1Apache HTTP Server Improper Escaping of Output VulnerabilityPatch nowKEVEPSS 99.96%Jul 1, 2024
- Critical9.8OSGeo GeoServer GeoTools Eval Injection VulnerabilityPatch nowKEVEPSS 99.81%Jul 1, 2024
- High8.1A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).Patch nowKEVEPSS 99.51%Jul 1, 2024
- Unknownmailster mailster Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.27%Jun 28, 2024
- Unknownnetis-systems mw5360_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 70.78%Jun 27, 2024
Sort