Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCisco IOS Improper AuthenticationPatch nowKEVEPSS 68.45%Nov 15, 2023
- High7.8Microsoft Windows Out-of-Bounds Read VulnerabilityPatch nowKEVEPSS 12.09%Nov 14, 2023
- High7.8Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation VulnerabilityPatch nowKEVEPSS 16.67%Nov 14, 2023
- High7.8Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation VulnerabilityPatch nowKEVEPSS 10.95%Nov 14, 2023
- High8.8Microsoft Windows SmartScreen Security Feature Bypass VulnerabilityPatch nowKEVEPSS 88.09%Nov 14, 2023
- UnknownVMware cloud_director Missing Authentication for Critical FunctionPatch nowKEVEPSS 1.34%Nov 14, 2023
- UnknownDynamicweb Logic Flaw Leading to Remote Code ExecutionPatch nowKEVEPSS 39.82%Nov 14, 2023
- Unknownwavlink wl-wn535k2 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 79.30%Nov 14, 2023
- Unknownreputeinfosystems pricing_table Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 13.45%Nov 14, 2023
- Unknownsubtlewebinc formcraft3 Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 20.25%Nov 14, 2023
- UnknownD-Link DIR-825 R1 Devices Improper AuthenticationPatch nowKEVEPSS 56.06%Nov 14, 2023
- UnknownGitLab CE/EE 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2 Unauthenticated User EnumerationPatch nowKEVEPSS 80.00%Nov 14, 2023
- Unknownnodered node-red-dashboard Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 18.85%Nov 14, 2023
- UnknownRocket.Chat server 3.11, 3.12 & 3.13 Remote Code ExecutionPatch nowKEVEPSS 95.24%Nov 14, 2023
- UnknownCitrix xenmobile_server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 43.93%Nov 14, 2023
- Unknownyouphptube youphptube_encoder Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 38.53%Nov 14, 2023
- UnknownIgnite Realtime Openfire Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 32.30%Nov 14, 2023
- Unknownflowpaper flexpaper Improper Input ValidationPatch nowKEVEPSS 52.54%Nov 14, 2023
- UnknownNagios Nagios XI Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 42.05%Nov 14, 2023
- UnknownMetabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 Unauthenticated Command ExecutionPatch nowKEVEPSS 98.68%Nov 13, 2023
- Unknownwelcart welcart_e-commerce Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 5.52%Nov 13, 2023
- UnknownIWS WordPress plugin through 1.0 SQL InjectionPatch nowKEVEPSS 5.01%Nov 13, 2023
- Unknowncontec solarview_compact Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 30.11%Nov 13, 2023
- Unknownpluginus inpost_gallery Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 10.18%Nov 13, 2023
- UnknownJoomSport WordPress plugin before 5.2.8 SQL InjectionPatch nowKEVEPSS 5.09%Nov 13, 2023