Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium6.1Google Chromium Intents Improper Input Validation VulnerabilityVuln · CVE-2021-38000 · Google · Chromium Intents · CISA KEV · CVE.org · FIRST EPSS · Chrome, GooglePatch nowKEVEPSS 4.95%Sep 15, 2021
High8.8SAP NetWeaver Unrestricted File Upload VulnerabilityVuln · CVE-2021-38163 · SAP · NetWeaver · CISA KEV · CVE.org · FIRST EPSS · SAPPatch nowKEVEPSS 36.90%Sep 14, 2021
Critical9.8Aviatrix Controller Unrestricted Upload of FileVuln · CVE-2021-40870 · Aviatrix · Aviatrix Controller · CISA KEV · CVE.org · FIRST EPSS · AviatrixPatch nowKEVEPSS 93.02%Sep 13, 2021
Critical9.6Google Chromium Indexed DB API Use-After-Free VulnerabilityVuln · CVE-2021-30633 · Google · Chromium Indexed DB API · CISA KEV · CVE.org · FIRST EPSS · Chrome, GooglePatch nowKEVEPSS 33.18%Sep 8, 2021
High8.8Google Chromium V8 Out-of-Bounds Write VulnerabilityVuln · CVE-2021-30632 · Google · Chromium V8 · CISA KEV · CVE.org · FIRST EPSS · Chrome, GooglePatch nowKEVEPSS 63.19%Sep 8, 2021
Critical9.8Zoho ManageEngine ADSelfService Plus Authentication Bypass VulnerabilityVuln · CVE-2021-40539 · Zoho · ManageEngine · CISA KEV · CVE.org · FIRST EPSS · ManageEnginePatch nowKEVEPSS 98.96%Sep 7, 2021
High8.8Microsoft MSHTML Remote Code Execution VulnerabilityVuln · CVE-2021-40444 · Microsoft · MSHTML · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 97.84%Sep 7, 2021
Critical9.8Zoho ManageEngine ServiceDesk Authentication Bypass VulnerabilityVuln · CVE-2021-37415 · Zoho · ManageEngine ServiceDesk Plus (SDP) · CISA KEV · CVE.org · FIRST EPSS · ManageEnginePatch nowKEVEPSS 99.83%Aug 31, 2021
Critical9.8Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection VulnerabilityVuln · CVE-2021-26084 · Atlassian · Confluence Server and Data Center · CISA KEV · CVE.org · FIRST EPSS · Atlassian, ConfluencePatch nowKEVEPSS 100.00%Aug 30, 2021
Critical9.1October CMS Improper AuthenticationVuln · CVE-2021-32648 · October CMS · October CMS · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 90.42%Aug 26, 2021
High7.5Apple iOS, macOS, watchOS Sandbox Bypass VulnerabilityVuln · CVE-2021-31010 · Apple · iOS, macOS, watchOS · CISA KEV · CVE.org · FIRST EPSS · Apple, iOSPatch nowKEVEPSS 3.67%Aug 24, 2021
High7.8Apple iOS and iPadOS Buffer Overflow VulnerabilityVuln · CVE-2021-30983 · Apple · iOS and iPadOS · CISA KEV · CVE.org · FIRST EPSS · Apple, iOSPatch nowKEVEPSS 2.92%Aug 24, 2021
High7.8Apple Multiple Products Integer Overflow or Wraparound VulnerabilityVuln · CVE-2021-30952 · Apple · Multiple Products · CISA KEV · CVE.org · FIRST EPSS · ApplePatch nowKEVEPSS 6.96%Aug 24, 2021
High7.8Apple iOS, iPadOS, and macOS Out-of-Bounds Write VulnerabilityVuln · CVE-2021-30900 · Apple · iOS, iPadOS, and macOS · CISA KEV · CVE.org · FIRST EPSS · Apple, iOSPatch nowKEVEPSS 5.20%Aug 24, 2021
High7.8Apple Multiple Products Memory Corruption VulnerabilityVuln · CVE-2021-30883 · Apple · Multiple Products · CISA KEV · CVE.org · FIRST EPSS · Apple, iOSPatch nowKEVEPSS 14.72%Aug 24, 2021
High7.8Apple iOS, iPadOS, and macOS Type Confusion VulnerabilityVuln · CVE-2021-30869 · Apple · iOS, iPadOS, and macOS · CISA KEV · CVE.org · FIRST EPSS · Apple, iOSPatch nowKEVEPSS 4.13%Aug 24, 2021
High7.8Apple Multiple Products Integer Overflow VulnerabilityVuln · CVE-2021-30860 · Apple · Multiple Products · CISA KEV · CVE.org · FIRST EPSS · Apple, iOSPatch nowKEVEPSS 75.99%Aug 24, 2021
High8.8Apple iOS, iPadOS, macOS Use-After-Free VulnerabilityVuln · CVE-2021-30858 · Apple · iOS, iPadOS, and macOS · CISA KEV · CVE.org · FIRST EPSS · Apple, iOSPatch nowKEVEPSS 13.38%Aug 24, 2021
High8.5XStream Remote Code Execution VulnerabilityVuln · CVE-2021-39144 · XStream · XStream · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 98.12%Aug 23, 2021
Critical9.8Realtek AP-Router SDK Buffer Overflow VulnerabilityVuln · CVE-2021-35395 · Realtek · AP-Router SDK · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 98.10%Aug 16, 2021
Critical9.8Realtek Jungle SDK Remote Code Execution VulnerabilityVuln · CVE-2021-35394 · Realtek · Jungle Software Development Kit (SDK) · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 99.88%Aug 16, 2021
Medium5.3Atlassian Jira Server and Data Center Path Traversal VulnerabilityVuln · CVE-2021-26086 · Atlassian · Jira Server and Data Center · CISA KEV · CVE.org · FIRST EPSS · Atlassian, JiraPatch nowKEVEPSS 100.00%Aug 15, 2021
Critical9.8Sunhillo SureLine OS Command Injection VulnerablityVuln · CVE-2021-36380 · Sunhillo · SureLine · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 97.83%Aug 13, 2021
High7.5Microsoft Windows Local Security Authority (LSA) Spoofing VulnerabilityVuln · CVE-2021-36942 · Microsoft · Windows · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 66.02%Aug 12, 2021
High7.8Microsoft Windows Event Tracing Privilege Escalation VulnerabilityVuln · CVE-2021-34486 · Microsoft · Windows · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 9.25%Aug 12, 2021

Sort