Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMicrosoft Windows Update Remote Code Execution VulnerabilityPatch nowKEVEPSS 12.92%Sep 10, 2024
- High8.8Microsoft Windows MSHTML Platform Spoofing VulnerabilityPatch nowKEVEPSS 54.49%Sep 10, 2024
- High7.3Microsoft Publisher Protection Mechanism Failure VulnerabilityPatch nowKEVEPSS 2.67%Sep 10, 2024
- Medium5.4Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure VulnerabilityPatch nowKEVEPSS 10.03%Sep 10, 2024
- High7.8Microsoft Windows Installer Improper Privilege Management VulnerabilityPatch nowKEVEPSS 6.26%Sep 10, 2024
- Unknownecho anti_cheat_tool Improper Privilege ManagementPatch nowKEVEPSS 0.47%Sep 10, 2024
- Unknownvoipmonitor voipmonitor Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 36.63%Sep 6, 2024
- Critical9.8Cisco Smart Licensing Utility Static Credential VulnerabilityPatch nowKEVEPSS 97.09%Sep 4, 2024
- High7.5Apache OFBiz Forced Browsing VulnerabilityPatch nowKEVEPSS 99.98%Sep 4, 2024
- UnknownSensei LMS Email Template LeakPatch nowKEVEPSS 1.75%Sep 4, 2024
- Unknownjournyx journyx Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 32.92%Sep 4, 2024
- UnknownSynacor Zimbra Collaboration Suite (ZCS) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 63.56%Sep 4, 2024
- Unknownyandex yandex_browser Untrusted Search PathPatch nowKEVEPSS 0.71%Sep 3, 2024
- UnknownHAProxy Endless Loop HTTP/2 VulnerabilityPatch nowKEVEPSS 1.20%Sep 3, 2024
- Critical9.8Progress WhatsUp Gold SQL Injection VulnerabilityPatch nowKEVEPSS 93.00%Aug 29, 2024
- UnknownFastAdmin /index/ajax/lang Directory Traversal VulnerabilityPatch nowKEVEPSS 16.88%Aug 29, 2024
- UnknownAVTECH IP Camera Command Injection VulnerabilityPatch nowKEVEPSS 39.00%Aug 28, 2024
- Unknownsuperstorefinder super_store_finder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.46%Aug 28, 2024
- Unknownsuperstorefinder super_store_finder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.46%Aug 28, 2024
- Unknownsuperstorefinder super_store_finder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.27%Aug 28, 2024
- Unknownsunshinephotocart sunshine_photo_cart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.62%Aug 28, 2024
- Critical10.0HP intelligent_management_center Deserialization of Untrusted DataPatch nowKEVEPSS 0.96%Aug 28, 2024
- UnknownD-Link DIR-825 R1 Devices Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 5.25%Aug 28, 2024
- Unknownverizon fios_quantum_gateway_g1100_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 29.89%Aug 28, 2024
- UnknownWordPress Name Directory Plugin Cross Site Scripting (XSS)Patch nowKEVEPSS 0.26%Aug 26, 2024