Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownOpenMetadata Authentication BypassPatch nowKEVEPSS 73.26%Apr 17, 2024
- UnknownPipeline: Groovy Plugin 2.61 and earlier Sandbox BypassPatch nowKEVEPSS 86.05%Apr 15, 2024
- UnknownDell emc_idrac7 Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 90.09%Apr 15, 2024
- Unknownawesomemotive duplicator Files or Directories Accessible to External PartiesPatch nowKEVEPSS 30.89%Apr 11, 2024
- Unknownstrangerstudios paid_memberships_pro Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 81.83%Apr 11, 2024
- High8.8Microsoft SmartScreen Prompt Security Feature Bypass VulnerabilityPatch nowKEVEPSS 45.15%Apr 9, 2024
- UnknownNextChat Internal HTTP Endpoints SSRF and XSSPatch nowKEVEPSS 83.16%Apr 6, 2024
- UnknownMicrosoft Excel Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 9.45%Apr 4, 2024
- Critical9.8D-Link Multiple NAS Devices Command Injection VulnerabilityPatch nowKEVEPSS 100.00%Apr 3, 2024
- Critical9.8D-Link Multiple NAS Devices Use of Hard-Coded Credentials VulnerabilityPatch nowKEVEPSS 98.11%Apr 3, 2024
- High7.3Alkacon OpenCms before 10.5.1 allows remote unauthenticated attackers to obtain sensitive information via a cmis-online/query XXE attack on a Chemistry servlet.Patch nowKEVEPSS 2.34%Apr 2, 2024
- UnknownAutomatic <= 3.92.0 - Unauthenticated Arbitrary File Download and Server-Side Request ForgeryPatch nowKEVEPSS 72.77%Mar 29, 2024
- Unknownmailster mailster Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.43%Mar 28, 2024
- Unknowncastos seriously_simple_podcasting Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.43%Mar 26, 2024
- High7.5Microsoft .NET Framework Information Disclosure VulnerabilityPatch nowKEVEPSS 98.62%Mar 22, 2024
- UnknownIBM operational_decision_manager Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 76.40%Mar 17, 2024
- Unknownaiohttp aiohttp Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 76.88%Mar 15, 2024
- High7.8Microsoft Windows Error Reporting Service Improper Privilege Management VulnerabilityPatch nowKEVEPSS 3.98%Mar 12, 2024
- UnknownGrafana Labs Grafana Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 99.86%Mar 7, 2024
- Unknownuniview isc_2500-s_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 32.09%Mar 5, 2024
- High7.3JetBrains TeamCity Relative Path Traversal VulnerabilityPatch nowKEVEPSS 99.99%Mar 4, 2024
- Critical9.8JetBrains TeamCity Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.94%Mar 4, 2024
- UnknownTOTOLINK a3002ru Improper AuthenticationPatch nowKEVEPSS 29.56%Feb 23, 2024
- UnknownTerraMaster TerraMaster OS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 31.88%Feb 22, 2024
- Critical9.8Progress Kemp LoadMaster OS Command Injection VulnerabilityPatch nowKEVEPSS 95.39%Feb 21, 2024
Sort