Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownZoho manageengine_firewall_analyzer Improper Handling of Exceptional ConditionsPatch nowKEVEPSS 7.25%Nov 17, 2023
- Unknownbadgeos badgos Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.32%Nov 17, 2023
- Unknownnirweb nirweb_support Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 13.05%Nov 17, 2023
- Unknowneasyappointments easyappointments Exposure of Private Personal Information to an Unauthorized ActorPatch nowKEVEPSS 43.75%Nov 17, 2023
- Unknownfranklinfueling colibri_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 59.75%Nov 17, 2023
- UnknownrConfig rConfig Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 36.51%Nov 17, 2023
- UnknownJira CachingResourceDownloadRewriteRule class Security BypassPatch nowKEVEPSS 59.83%Nov 17, 2023
- UnknownD-Link dir-868l_b1_firmware Missing Authentication for Critical FunctionPatch nowKEVEPSS 56.39%Nov 17, 2023
- UnknownApache CouchDB Improper Privilege ManagementPatch nowKEVEPSS 99.84%Nov 17, 2023
- UnknownSonicWall analytics Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 72.77%Nov 16, 2023
- Unknownfrangoteam fuxa Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 25.95%Nov 16, 2023
- UnknownIvanti avalanche Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 89.10%Nov 16, 2023
- UnknownTOTOLINK a720r_firmware Missing AuthorizationPatch nowKEVEPSS 1.38%Nov 16, 2023
- Unknownspring-boot-actuator-logview_project spring-boot-actuator-logview Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 21.01%Nov 16, 2023
- Critical9.9Qlik Sense HTTP Tunneling VulnerabilityPatch nowKEVEPSS 47.45%Nov 15, 2023
- UnknownCitrix ShareFile Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 81.17%Nov 15, 2023
- UnknownCisco RV Series Routers Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 90.11%Nov 15, 2023
- Unknownsoftwarepublico i3geo Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 13.60%Nov 15, 2023
- Unknowndogtagpki dogtagpki Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 85.39%Nov 15, 2023
- Unknownintelliantech aptus_web Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 82.99%Nov 15, 2023
- Unknownbitrix24 bitrix24 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 4.51%Nov 15, 2023
- Unknownyouphptube youphptube_encoder Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 30.17%Nov 15, 2023
- UnknownCisco evolved_programmable_network_manager Improper Input ValidationPatch nowKEVEPSS 98.05%Nov 15, 2023
- UnknownCisco RV Series Routers Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 77.73%Nov 15, 2023
- UnknownApache Axis2 dswsbobje.war Remote Code ExecutionPatch nowKEVEPSS 90.85%Nov 15, 2023