Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownApache Struts Files or Directories Accessible to External PartiesPatch nowKEVEPSS 80.82%Jan 31, 2024
- UnknownCitrix ADC and Citrix Gateway Root Administrator (nsroot) Privilege EscalationPatch nowKEVEPSS 1.31%Jan 31, 2024
- UnknownCitrix NetScaler ADC and NetScaler Gateway Improper Input ValidationPatch nowKEVEPSS 2.63%Jan 31, 2024
- UnknownIvanti avalanche Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 96.58%Jan 31, 2024
- Unknownhitron lguvr-16h_firmware Improper Input ValidationPatch nowKEVEPSS 0.50%Jan 30, 2024
- Unknownhitron lguvr-8h_firmware Improper Input ValidationPatch nowKEVEPSS 0.50%Jan 30, 2024
- Unknownhitron lguvr-4h_firmware Improper Input ValidationPatch nowKEVEPSS 0.50%Jan 30, 2024
- Unknownhitron hvr-16781_firmware Improper Input ValidationPatch nowKEVEPSS 0.50%Jan 30, 2024
- Unknownhitron hvr-8781_firmware Improper Input ValidationPatch nowKEVEPSS 0.50%Jan 30, 2024
- Unknownhitron hvr-4781_firmware Improper Input ValidationPatch nowKEVEPSS 0.56%Jan 30, 2024
- Unknownperforce helix_core Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.11%Jan 30, 2024
- UnknownGoogle Android Use After FreePatch nowKEVEPSS 1.72%Jan 30, 2024
- UnknownWindows MSHTML Platform Security Feature BypassPatch nowKEVEPSS 2.87%Jan 30, 2024
- Unknowncookieinformation wp-gdpr-compliance Missing AuthorizationPatch nowKEVEPSS 1.46%Jan 29, 2024
- UnknownFortra GoAnywhere MFT Direct Request ('Forced Browsing')Patch nowKEVEPSS 95.09%Jan 25, 2024
- Unknownwpengine better_search_replace Deserialization of Untrusted DataPatch nowKEVEPSS 68.05%Jan 25, 2024
- Critical9.8Jenkins Command Line Interface (CLI) Path Traversal VulnerabilityPatch nowKEVEPSS 100.00%Jan 24, 2024
- UnknownInstaWP instawp_connect Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.62%Jan 24, 2024
- UnknownInstaWP instawp_connect Insertion of Sensitive Information Into Sent DataPatch nowKEVEPSS 0.50%Jan 24, 2024
- High8.8Apple Multiple Products WebKit Type Confusion VulnerabilityPatch nowKEVEPSS 10.59%Jan 22, 2024
- Unknownlikeshop likeshop Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 72.92%Jan 22, 2024
- Unknownh2o h2o Missing AuthorizationPatch nowKEVEPSS 4.34%Jan 22, 2024
- UnknownWPvivid migration\,_backup\,_staging Improper Privilege ManagementPatch nowKEVEPSS 0.71%Jan 22, 2024
- UnknownExperience Manager, Experience Platform, and Experience Commerce Remote Code ExecutionPatch nowKEVEPSS 86.69%Jan 22, 2024
- Unknownmyeventon eventon Missing AuthorizationPatch nowKEVEPSS 42.67%Jan 22, 2024