Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

High7.8Microsoft Exchange Server Remote Code Execution VulnerabilityVuln · CVE-2021-27065 · Microsoft · Exchange Server · CISA KEV · CVE.org · FIRST EPSS · Exchange, MicrosoftPatch nowKEVEPSS 99.88%Mar 2, 2021
Critical9.1Microsoft Exchange Server Remote Code Execution VulnerabilityVuln · CVE-2021-26855 · Microsoft · Exchange Server · CISA KEV · CVE.org · FIRST EPSS · Exchange, MicrosoftPatch nowKEVEPSS 100.00%Mar 2, 2021
High8.8Veritas Backup Exec Agent Command Execution VulnerabilityVuln · CVE-2021-27878 · Veritas · Backup Exec Agent · CISA KEV · CVE.org · FIRST EPSS · VeritasPatch nowKEVEPSS 23.95%Mar 1, 2021
Critical9.8Veritas Backup Exec Agent Improper Authentication VulnerabilityVuln · CVE-2021-27877 · Veritas · Backup Exec Agent · CISA KEV · CVE.org · FIRST EPSS · VeritasPatch nowKEVEPSS 64.91%Mar 1, 2021
High8.1Veritas Backup Exec Agent File Access VulnerabilityVuln · CVE-2021-27876 · Veritas · Backup Exec Agent · CISA KEV · CVE.org · FIRST EPSS · VeritasPatch nowKEVEPSS 13.52%Mar 1, 2021
Critical9.8VMware vCenter Server Remote Code Execution VulnerabilityVuln · CVE-2021-21972 · VMware · vCenter Server · CISA KEV · CVE.org · FIRST EPSS · VMwarePatch nowKEVEPSS 99.87%Feb 24, 2021
High8.8Nagios XI OS Command InjectionVuln · CVE-2021-25298 · Nagios · Nagios XI · CISA KEV · CVE.org · FIRST EPSS · NagiosPatch nowKEVEPSS 73.64%Feb 15, 2021
High8.8Nagios XI OS Command InjectionVuln · CVE-2021-25297 · Nagios · Nagios XI · CISA KEV · CVE.org · FIRST EPSS · NagiosPatch nowKEVEPSS 56.66%Feb 15, 2021
High8.8Nagios XI OS Command InjectionVuln · CVE-2021-25296 · Nagios · Nagios XI · CISA KEV · CVE.org · FIRST EPSS · NagiosPatch nowKEVEPSS 71.94%Feb 15, 2021
Critical9.8Micro Focus Operation Bridge Report (OBR) Remote Code Execution VulnerabilityVuln · CVE-2021-22502 · Micro Focus · Operation Bridge Reporter (OBR) · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 96.74%Feb 8, 2021
High7.8Sudo Heap-Based Buffer Overflow VulnerabilityVuln · CVE-2021-3156 · Sudo · Sudo · CISA KEV · CVE.org · FIRST EPSS · Synology, TrellixPatch nowKEVEPSS 99.96%Jan 26, 2021
Critical9.8Laravel Ignition File Upload VulnerabilityVuln · CVE-2021-3129 · Laravel · Ignition · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 99.94%Jan 12, 2021
High7.5Apache Flink Improper Access Control VulnerabilityVuln · CVE-2020-17519 · Apache · Flink · CISA KEV · CVE.org · FIRST EPSS · ApachePatch nowKEVEPSS 97.81%Jan 5, 2021
Critical9.8Apache Struts Remote Code Execution VulnerabilityVuln · CVE-2020-17530 · Apache · Struts · CISA KEV · CVE.org · FIRST EPSS · ApachePatch nowKEVEPSS 95.93%Dec 10, 2020
High7.8Microsoft Win32k Privilege Escalation VulnerabilityVuln · CVE-2021-1732 · Microsoft · Win32k · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 78.38%Dec 10, 2020
High7.8PEAR Archive_Tar Deserialization of Untrusted Data VulnerabilityVuln · CVE-2020-28949 · PEAR · Archive_Tar · CISA KEV · CVE.org · FIRST EPSS · Drupal, PHPPatch nowKEVEPSS 84.55%Nov 19, 2020
Critical9.8Apache Airflow's Experimental API Authentication BypassVuln · CVE-2020-13927 · Apache · Airflow · CISA KEV · CVE.org · FIRST EPSS · ApachePatch nowKEVEPSS 99.78%Nov 10, 2020
Critical9.8SaltStack Salt Shell Injection VulnerabilityVuln · CVE-2020-16846 · SaltStack · Salt · CISA KEV · CVE.org · FIRST EPSS · SaltPatch nowKEVEPSS 99.59%Nov 6, 2020
Critical9.8Oracle WebLogic Server Remote Code Execution VulnerabilityVuln · CVE-2020-14750 · Oracle · WebLogic Server · CISA KEV · CVE.org · FIRST EPSS · Oracle, WebLogicPatch nowKEVEPSS 99.25%Nov 2, 2020
High7.2Ivanti Pulse Connect Secure Code Execution VulnerabilityVuln · CVE-2020-8260 · Ivanti · Connect Secure and Policy Secure · CISA KEV · CVE.org · FIRST EPSS · IvantiPatch nowKEVEPSS 96.48%Oct 28, 2020
High7.2Oracle WebLogic Server Unspecified VulnerabilityVuln · CVE-2020-14883 · Oracle · WebLogic Server · CISA KEV · CVE.org · FIRST EPSS · Oracle, WebLogicPatch nowKEVEPSS 97.73%Oct 21, 2020
Critical9.8Oracle WebLogic Server Remote Code Execution VulnerabilityVuln · CVE-2020-14882 · Oracle · WebLogic Server · CISA KEV · CVE.org · FIRST EPSS · Oracle, WebLogicPatch nowKEVEPSS 100.00%Oct 21, 2020
Medium5.5Apple iOS, iPadOS, and macOS Input Validation VulnerabilityVuln · CVE-2020-9934 · Apple · iOS, iPadOS, and macOS · CISA KEV · CVE.org · FIRST EPSS · Apple, iOSPatch nowKEVEPSS 3.21%Oct 16, 2020
Critical9.8Sophos SG UTM Remote Code Execution VulnerabilityVuln · CVE-2020-25223 · Sophos · SG UTM · CISA KEV · CVE.org · FIRST EPSS · SophosPatch nowKEVEPSS 96.75%Sep 24, 2020
Critical9.8WordPress File Manager Plugin Remote Code Execution VulnerabilityVuln · CVE-2020-25213 · WordPress · File Manager Plugin · CISA KEV · CVE.org · FIRST EPSS · WordPressPatch nowKEVEPSS 97.33%Sep 9, 2020