Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownASUS asuswrt Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.77%Oct 12, 2024
- UnknownHunk Companion Plugin for WordPress /wp-json/hc/v1/themehunk-import REST API VulnerabilityPatch nowKEVEPSS 9.08%Oct 11, 2024
- UnknownVMware ESXi, Workstation, and Fusion UHCI USB Controller VulnerabilityPatch nowKEVEPSS 2.31%Oct 11, 2024
- UnknownVMware ESXi Out-of-bounds Write VulnerabilityPatch nowKEVEPSS 0.50%Oct 11, 2024
- UnknownRed Hat satellite Insufficient Session ExpirationPatch nowKEVEPSS 0.65%Oct 10, 2024
- Critical9.2Palo Alto Networks Expedition SQL Injection VulnerabilityPatch nowKEVEPSS 99.63%Oct 9, 2024
- Critical9.9Palo Alto Networks Expedition OS Command Injection VulnerabilityPatch nowKEVEPSS 98.55%Oct 9, 2024
- Critical9.8Mozilla Firefox Use-After-Free VulnerabilityPatch nowKEVEPSS 23.18%Oct 9, 2024
- UnknownD-Link dir-816_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 5.10%Oct 9, 2024
- Critical9.8Microsoft Configuration Manager SQL Injection VulnerabilityPatch nowKEVEPSS 81.04%Oct 8, 2024
- UnknownIvanti CSA Path Traversal Security Bypass VulnerabilityPatch nowKEVEPSS 15.55%Oct 8, 2024
- High7.2Ivanti Cloud Services Appliance (CSA) OS Command Injection VulnerabilityPatch nowKEVEPSS 59.65%Oct 8, 2024
- High7.2Ivanti Cloud Services Appliance (CSA) SQL Injection VulnerabilityPatch nowKEVEPSS 43.78%Oct 8, 2024
- UnknownLatePoint latepoint Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 3.08%Oct 8, 2024
- UnknownLatePoint latepoint Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.90%Oct 8, 2024
- UnknownQualitor checkAcesso.php Remote Code Execution VulnerabilityPatch nowKEVEPSS 46.29%Oct 8, 2024
- High8.1Microsoft Windows MSHTML Platform Spoofing VulnerabilityPatch nowKEVEPSS 46.11%Oct 8, 2024
- High7.8Microsoft Windows Management Console Remote Code Execution VulnerabilityPatch nowKEVEPSS 66.70%Oct 8, 2024
- UnknownOracle WebLogic Server Core Component T3/IIOP Unauthenticated VulnerabilityPatch nowKEVEPSS 0.75%Oct 8, 2024
- UnknownpgAdmin 4 OAuth2 Authentication Bypass VulnerabilityPatch nowKEVEPSS 9.69%Oct 7, 2024
- Unknownsmart-hmi webiq Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 11.76%Oct 7, 2024
- UnknownProgress ui_for_wpf Deserialization of Untrusted DataPatch nowKEVEPSS 0.25%Oct 7, 2024
- UnknownProgress ui_for_wpf Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 0.74%Oct 7, 2024
- UnknownProgress ui_for_wpf Deserialization of Untrusted DataPatch nowKEVEPSS 0.46%Oct 7, 2024
- UnknownProgress ui_for_wpf Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 0.70%Oct 7, 2024