Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5Microsoft Windows Kernel Information Disclosure VulnerabilityPatch nowKEVEPSS 81.11%Apr 14, 2021
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 8.40%Apr 13, 2021
- UnknownCar Rental Management System index.php VulnerabilityPatch nowKEVEPSS 16.82%Apr 12, 2021
- Unknownloginizer loginizer Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 52.26%Apr 12, 2021
- UnknownApache unomi Improper Input ValidationPatch nowKEVEPSS 68.30%Apr 12, 2021
- Unknownwpengine wpgraphql Missing Authentication for Critical FunctionPatch nowKEVEPSS 35.64%Apr 12, 2021
- UnknownWordPress wordpress Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 82.74%Apr 12, 2021
- UnknownApache Tomcat Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 99.92%Apr 12, 2021
- Unknownzh_baidumap_project zh_baidumap Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 57.70%Apr 12, 2021
- UnknownLinksys ea3500_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 4.01%Apr 12, 2021
- UnknownDrupal Drupal Core Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 99.97%Apr 12, 2021
- UnknownHP Universal CMDB 10.01 and 10.10 Unknown Vector Remote Code Execution VulnerabilityPatch nowKEVEPSS 12.23%Apr 12, 2021
- High7.2SonicWall Email Security Unrestricted Upload of File VulnerabilityPatch nowKEVEPSS 16.64%Apr 9, 2021
- Critical9.8SonicWall Email Security Improper Privilege Management VulnerabilityPatch nowKEVEPSS 88.78%Apr 9, 2021
- High8.8Google Chromium Blink Use-After-Free VulnerabilityPatch nowKEVEPSS 9.31%Apr 7, 2021
- Medium4.9ASUS asmb9-ikvm_firmware Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 1.81%Apr 6, 2021
- Unknownaivahthemes business_hours_pro Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.04%Apr 2, 2021
- Critical9.8F5 BIG-IP Traffic Management Microkernel Buffer OverflowPatch nowKEVEPSS 61.06%Mar 31, 2021
- Medium6.1Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 7.08%Mar 26, 2021
- Unknownelementor Website Builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.75%Mar 17, 2021
- Unknownelementor Website Builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.75%Mar 17, 2021
- Unknownelementor Website Builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.75%Mar 17, 2021
- Medium5.5Arm Trusted Firmware Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 3.06%Mar 15, 2021
- Critical9.8Yealink Device Management Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 82.86%Mar 15, 2021
- UnknownThemeum tutor_lms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.25%Mar 15, 2021
Sort