Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3Craft CMS Code Injection VulnerabilityPatch nowKEVEPSS 97.41%Dec 18, 2024
- UnknownApache Struts File Upload VulnerabilityPatch nowKEVEPSS 72.37%Dec 15, 2024
- Critical9.8Cleo Multiple Products Unauthenticated File Upload VulnerabilityPatch nowKEVEPSS 93.97%Dec 10, 2024
- Medium6.9Palo Alto Networks PAN-OS Management Interface OS Command Injection VulnerabilityPatch nowKEVEPSS 93.75%Nov 18, 2024
- Critical9.3Palo Alto Networks PAN-OS Management Interface Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.79%Nov 18, 2024
- Unknownreally-simple-plugins really_simple_security Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 82.22%Nov 14, 2024
- UnknownCyberPanel /filemanager/upload Remote Code Execution VulnerabilityPatch nowKEVEPSS 47.67%Oct 29, 2024
- Critical9.8CyberPanel Incorrect Default Permissions VulnerabilityPatch nowKEVEPSS 84.40%Oct 29, 2024
- UnknownAngular-base64-upload demo/server.php VulnerabilityPatch nowKEVEPSS 40.21%Oct 14, 2024
- High7.2Ivanti Cloud Services Appliance OS Command Injection VulnerabilityPatch nowKEVEPSS 88.53%Sep 10, 2024
- UnknownLiteLLM Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 34.38%Aug 22, 2024
- High7.2Microsoft SharePoint Deserialization VulnerabilityPatch nowKEVEPSS 50.89%Jul 9, 2024
- Critical9.1Apache HTTP Server Improper Escaping of Output VulnerabilityPatch nowKEVEPSS 99.96%Jul 1, 2024
- Critical9.8Progress WhatsUp Gold Path Traversal VulnerabilityPatch nowKEVEPSS 99.29%Jun 25, 2024
- Critical9.8Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) VulnerabilityPatch nowKEVEPSS 99.99%Jun 13, 2024
- UnknownApache kafka_connect Deserialization of Untrusted DataPatch nowKEVEPSS 95.81%May 10, 2024
- Medium5.0CrushFTP CrushFTP Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 9.41%Apr 26, 2024
- Critical9.8CrushFTP Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.97%Apr 26, 2024
- UnknownFortinet fortiwlm Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 21.32%Apr 14, 2024
- Unknownanyscale ray Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 83.94%Mar 26, 2024
- Critical9.8GitLab Community and Enterprise Editions Improper Access Control VulnerabilityPatch nowKEVEPSS 94.46%Jan 12, 2024
- Critical10.0Cisco IOS XE Web UI Privilege Escalation VulnerabilityPatch nowKEVEPSS 99.61%Oct 16, 2023
- High7.5Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow VulnerabilityPatch nowKEVEPSS 100.00%Oct 10, 2023
- Critical9.8Citrix Content Collaboration ShareFile Improper Access Control VulnerabilityPatch nowKEVEPSS 97.34%Jul 10, 2023
- High8.8PaperCut NG/MF Cross-Site Request Forgery (CSRF) VulnerabilityPatch nowKEVEPSS 28.83%Jun 20, 2023
Sort