Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.4ConnectWise ScreenConnect Path Traversal VulnerabilityPatch nowKEVEPSS 95.44%Feb 21, 2024
- Critical10.0ConnectWise ScreenConnect Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.98%Feb 20, 2024
- High8.8Oracle Agile Product Lifecycle Management (PLM) Deserialization VulnerabilityPatch nowKEVEPSS 3.93%Feb 16, 2024
- Critical10.0Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.81%Feb 15, 2024
- Critical9.8Microsoft Outlook Improper Input Validation VulnerabilityPatch nowKEVEPSS 94.66%Feb 13, 2024
- Critical9.8Microsoft Exchange Server Privilege Escalation VulnerabilityPatch nowKEVEPSS 12.56%Feb 13, 2024
- High8.1Microsoft Windows Internet Shortcut Files Security Feature Bypass VulnerabilityPatch nowKEVEPSS 99.41%Feb 13, 2024
- High7.6Microsoft Windows SmartScreen Security Feature Bypass VulnerabilityPatch nowKEVEPSS 27.80%Feb 13, 2024
- High7.8Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control VulnerabilityPatch nowKEVEPSS 59.81%Feb 13, 2024
- Medium6.1deconf analytics_insights URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 1.25%Feb 12, 2024
- Critical9.3Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.86%Feb 12, 2024
- UnknownExim before 4.92.2 Trailing Backslash Remote Code ExecutionPatch nowKEVEPSS 35.74%Feb 8, 2024
- Unknownsquirrelly squirrelly Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 58.29%Feb 7, 2024
- Critical9.8exrick xmall Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.35%Feb 6, 2024
- UnknownIvanti Connect Secure and Policy Secure Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 94.72%Feb 6, 2024
- Unknownhoneywell pm43_firmware Improper Input ValidationPatch nowKEVEPSS 49.04%Feb 6, 2024
- UnknownIvanti avalanche Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 96.58%Jan 31, 2024
- Unknownwpengine better_search_replace Deserialization of Untrusted DataPatch nowKEVEPSS 68.05%Jan 25, 2024
- Unknownreadtomyshoe_project readtomyshoe Generation of Error Message Containing Sensitive InformationPatch nowKEVEPSS 3.86%Jan 22, 2024
- UnknownFontsy WordPress plugin through 1.8.6 SQL InjectionPatch nowKEVEPSS 4.76%Jan 22, 2024
- UnknownH3C gr3200_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 10.80%Jan 22, 2024
- Unknowncuppacms cuppacms Inclusion of Functionality from Untrusted Control SpherePatch nowKEVEPSS 9.97%Jan 22, 2024
- Unknowncuppacms cuppacms Inclusion of Functionality from Untrusted Control SpherePatch nowKEVEPSS 7.93%Jan 22, 2024
- Unknownwpwax directorist Missing AuthorizationPatch nowKEVEPSS 1.84%Jan 22, 2024
- UnknownSAP NetWeaver Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 69.08%Jan 22, 2024
Sort