Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownXWiki xwiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 34.52%Jun 26, 2024
- Unknownjoommasters jms_blog Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 58.74%Jun 22, 2024
- High8.7nsfocusglobal secgate3600_firmware Missing Authentication for Critical FunctionPatch nowKEVEPSS 8.08%Jun 18, 2024
- Critical9.8Broadcom VMware vCenter Server Out-of-bounds Write VulnerabilityPatch nowKEVEPSS 22.38%Jun 17, 2024
- Critical9.8GeoVision Devices OS Command Injection VulnerabilityPatch nowKEVEPSS 10.07%Jun 16, 2024
- Unknownethyca fides Exposure of Sensitive System Information to an Unauthorized Control SpherePatch nowKEVEPSS 1.10%Jun 13, 2024
- High7.8Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference VulnerabilityPatch nowKEVEPSS 25.22%Jun 11, 2024
- High7.0Microsoft Windows Kernel TOCTOU Race Condition VulnerabilityPatch nowKEVEPSS 68.20%Jun 11, 2024
- Critical9.8salesagility suitecrm Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.69%Jun 10, 2024
- High7.8Android Kernel Remote Code Execution VulnerabilityPatch nowKEVEPSS 2.70%Jun 10, 2024
- High7.8Arm Mali GPU Kernel Driver Use-After-Free VulnerabilityPatch nowKEVEPSS 0.76%Jun 7, 2024
- Critical9.8PHP-CGI OS Command Injection VulnerabilityPatch nowKEVEPSS 99.99%Jun 7, 2024
- Medium6.1RoundCube Webmail Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 73.30%Jun 6, 2024
- High7.5SolarWinds Serv-U Path Traversal VulnerabilityPatch nowKEVEPSS 99.61%Jun 6, 2024
- Unknownbackupbliss backup_migration Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 2.05%Jun 3, 2024
- High8.8Ivanti Endpoint Manager (EPM) SQL Injection VulnerabilityPatch nowKEVEPSS 99.94%May 31, 2024
- Critical9.8Progress Telerik Report Server Authentication Bypass by Spoofing VulnerabilityPatch nowKEVEPSS 97.48%May 29, 2024
- UnknownApple safari Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 53.82%May 29, 2024
- High8.6Check Point Quantum Security Gateways Information Disclosure VulnerabilityPatch nowKEVEPSS 99.98%May 27, 2024
- UnknownConfluence Data Center and Server Remote Code ExecutionPatch nowKEVEPSS 88.27%May 23, 2024
- High8.7Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 26.94%May 22, 2024
- UnknownLinksys RE7000 AccessControlList VulnerabilityPatch nowKEVEPSS 16.52%May 22, 2024
- UnknownTenda ac18_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 34.84%May 22, 2024
- UnknownTOTOLINK a3002ru Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.19%May 22, 2024
- Critical9.6Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 7.47%May 20, 2024
Sort