Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited onlyCheckedFix range storedEPSS

High8.8Apache Airflow Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Vuln · CVE-2022-24288 · apache · airflow · CVE.org · FIRST EPSS · Monitored products — high · Airflow, ApachePatch nowKEVEPSS 77.88%Feb 25, 2022
Critical9.8Apache Airflow's Experimental API Authentication BypassVuln · CVE-2020-13927 · apache · airflow · CISA KEV · CVE.org · FIRST EPSS · Airflow, ApachePatch nowKEVEPSS 99.78%Nov 10, 2020
High8.8Apache Airflow Command InjectionVuln · CVE-2020-11978 · apache · airflow · CISA KEV · CVE.org · FIRST EPSS · Airflow, ApachePatch nowKEVEPSS 99.19%Jul 16, 2020

Sort