Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1Apache HTTP Server Improper Escaping of Output VulnerabilityPatch nowKEVEPSS 99.96%Jul 1, 2024
- Critical9.8Progress WhatsUp Gold Path Traversal VulnerabilityPatch nowKEVEPSS 99.29%Jun 25, 2024
- Critical9.8Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) VulnerabilityPatch nowKEVEPSS 99.99%Jun 13, 2024
- UnknownApache kafka_connect Deserialization of Untrusted DataPatch nowKEVEPSS 95.81%May 10, 2024
- Medium5.0CrushFTP CrushFTP Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 9.41%Apr 26, 2024
- Critical9.8CrushFTP Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.97%Apr 26, 2024
- UnknownFortinet fortiwlm Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 21.32%Apr 14, 2024
- Unknownanyscale ray Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 83.94%Mar 26, 2024
- Critical9.8GitLab Community and Enterprise Editions Improper Access Control VulnerabilityPatch nowKEVEPSS 94.46%Jan 12, 2024
- Critical10.0Cisco IOS XE Web UI Privilege Escalation VulnerabilityPatch nowKEVEPSS 99.61%Oct 16, 2023
- High7.5Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow VulnerabilityPatch nowKEVEPSS 100.00%Oct 10, 2023
- Critical9.8Citrix Content Collaboration ShareFile Improper Access Control VulnerabilityPatch nowKEVEPSS 97.34%Jul 10, 2023
- High8.8PaperCut NG/MF Cross-Site Request Forgery (CSRF) VulnerabilityPatch nowKEVEPSS 28.83%Jun 20, 2023
- Critical9.8Hitachi Vantara Pentaho BA Server Authorization Bypass VulnerabilityPatch nowKEVEPSS 92.27%Apr 3, 2023
- High7.2Hitachi Vantara Pentaho BA Server Special Element Injection VulnerabilityPatch nowKEVEPSS 97.67%Apr 3, 2023
- Critical9.8Fortinet Multiple Products Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.98%Oct 10, 2022
- Critical9.8Oracle Fusion Middleware Unspecified VulnerabilityPatch nowKEVEPSS 96.28%Jan 19, 2022
- Critical9.8Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection VulnerabilityPatch nowKEVEPSS 99.11%Dec 8, 2021
- Critical9.0Apache HTTP Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 100.00%Sep 16, 2021
- Critical9.8Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection VulnerabilityPatch nowKEVEPSS 100.00%Aug 30, 2021
- Unknownjquery_file_upload_project jquery_file_upload Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 97.25%May 9, 2015
Sort