Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

High8.8Microsoft Internet Explorer Remote Code Execution VulnerabilityVuln · CVE-2021-27085 · Microsoft · Internet Explorer · CISA KEV · CVE.org · FIRST EPSS · Internet Explorer, MicrosoftPatch nowKEVEPSS 5.45%Mar 11, 2021
High7.6Microsoft Office Remote Code Execution VulnerabilityVuln · CVE-2021-27059 · Microsoft · Office · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 6.08%Mar 11, 2021
High8.8Microsoft Internet Explorer Memory Corruption VulnerabilityVuln · CVE-2021-26411 · Microsoft · Internet Explorer · CISA KEV · CVE.org · FIRST EPSS · Edge, Internet ExplorerPatch nowKEVEPSS 81.67%Mar 9, 2021
High8.8Google Chromium Blink Use-After-Free VulnerabilityVuln · CVE-2021-21193 · Google · Chromium Blink · CISA KEV · CVE.org · FIRST EPSS · Chrome, GooglePatch nowKEVEPSS 9.95%Mar 9, 2021
High7.8Microsoft Exchange Server Remote Code Execution VulnerabilityVuln · CVE-2021-27065 · Microsoft · Exchange Server · CISA KEV · CVE.org · FIRST EPSS · Exchange, MicrosoftPatch nowKEVEPSS 99.88%Mar 2, 2021
High7.8Microsoft Exchange Server Remote Code Execution VulnerabilityVuln · CVE-2021-26858 · Microsoft · Exchange Server · CISA KEV · CVE.org · FIRST EPSS · Exchange, MicrosoftPatch nowKEVEPSS 93.65%Mar 2, 2021
High7.8Microsoft Exchange Server Remote Code Execution VulnerabilityVuln · CVE-2021-26857 · Microsoft · Exchange Server · CISA KEV · CVE.org · FIRST EPSS · Exchange, MicrosoftPatch nowKEVEPSS 95.76%Mar 2, 2021
Critical9.1Microsoft Exchange Server Remote Code Execution VulnerabilityVuln · CVE-2021-26855 · Microsoft · Exchange Server · CISA KEV · CVE.org · FIRST EPSS · Exchange, MicrosoftPatch nowKEVEPSS 100.00%Mar 2, 2021
High8.8Veritas Backup Exec Agent Command Execution VulnerabilityVuln · CVE-2021-27878 · Veritas · Backup Exec Agent · CISA KEV · CVE.org · FIRST EPSS · VeritasPatch nowKEVEPSS 23.95%Mar 1, 2021
Critical9.8Veritas Backup Exec Agent Improper Authentication VulnerabilityVuln · CVE-2021-27877 · Veritas · Backup Exec Agent · CISA KEV · CVE.org · FIRST EPSS · VeritasPatch nowKEVEPSS 64.91%Mar 1, 2021
High8.1Veritas Backup Exec Agent File Access VulnerabilityVuln · CVE-2021-27876 · Veritas · Backup Exec Agent · CISA KEV · CVE.org · FIRST EPSS · VeritasPatch nowKEVEPSS 13.52%Mar 1, 2021
Medium5.3VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) VulnerabilityVuln · CVE-2021-21973 · VMware · vCenter Server and Cloud Foundation · CISA KEV · CVE.org · FIRST EPSS · VMwarePatch nowKEVEPSS 88.01%Feb 24, 2021
Critical9.8VMware vCenter Server Remote Code Execution VulnerabilityVuln · CVE-2021-21972 · VMware · vCenter Server · CISA KEV · CVE.org · FIRST EPSS · VMwarePatch nowKEVEPSS 99.87%Feb 24, 2021
Medium6.1chamilo chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Vuln · CVE-2021-26746 · chamilo · chamilo · CVE.org · FIRST EPSS · NIST NVD · PHPPatch nowKEVEPSS 0.99%Feb 19, 2021
High7.8System Information Library for Node.JS Command InjectionVuln · CVE-2021-21315 · Npm package · System Information Library for Node.JS · CISA KEV · CVE.org · FIRST EPSS · Node.js, npmPatch nowKEVEPSS 90.67%Feb 16, 2021
High8.8Google Chromium Race Condition VulnerabilityVuln · CVE-2021-21166 · Google · Chromium · CISA KEV · CVE.org · FIRST EPSS · Chrome, GooglePatch nowKEVEPSS 24.03%Feb 11, 2021
High7.8McAfee Total Protection (MTP) Improper Privilege Management VulnerabilityVuln · CVE-2021-23874 · McAfee · McAfee Total Protection (MTP) · CISA KEV · CVE.org · FIRST EPSS · TrellixPatch nowKEVEPSS 1.03%Feb 10, 2021
Unknownncr command_center_agent Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Vuln · CVE-2021-3122 · ncr · command_center_agent · CVE.org · FIRST EPSS · Metasploit ModulesPatch nowKEVEPSS 87.27%Feb 7, 2021
Critical9.8QNAP Helpdesk Improper Access Control VulnerabilityVuln · CVE-2020-2506 · QNAP · Helpdesk · CISA KEV · CVE.org · FIRST EPSS · QNAPPatch nowKEVEPSS 1.98%Feb 3, 2021
Critical9.8D-Link DNS-320 Device Command Injection VulnerabilityVuln · CVE-2020-25506 · D-Link · DNS-320 Storage Device · CISA KEV · CVE.org · FIRST EPSS · D-LinkPatch nowKEVEPSS 99.97%Feb 2, 2021
High7.8Sudo Heap-Based Buffer Overflow VulnerabilityVuln · CVE-2021-3156 · Sudo · Sudo · CISA KEV · CVE.org · FIRST EPSS · Synology, TrellixPatch nowKEVEPSS 99.96%Jan 26, 2021
Critical9.8ONLYOFFICE Docs Server Path Traversal VulnerabilityVuln · CVE-2021-3199 · ONLYOFFICE · Docs · CISA Cybersecurity Advisories · CISA KEV · CVE.org · ONLYOFFICEPatch nowKEVEPSS 20.14%Jan 26, 2021
High8.8Google Chromium V8 Heap Buffer Overflow VulnerabilityVuln · CVE-2021-21148 · Google · Chromium V8 · CISA KEV · CVE.org · FIRST EPSS · Chrome, GooglePatch nowKEVEPSS 19.97%Jan 24, 2021
Unknownpostgresql postgresql Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Vuln · CVE-2019-9193 · postgresql · postgresql · CVE.org · FIRST EPSS · Exploit Database · PostgreSQLPatch nowKEVEPSS 91.66%Jan 22, 2021
UnknownJQuery JQuery Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Vuln · CVE-2019-11358 · JQuery · JQuery · CVE.org · FIRST EPSS · Exploit Database · DrupalPatch nowKEVEPSS 86.82%Jan 21, 2021

Sort