Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownAdobe ColdFusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 37.09%Nov 13, 2023
- Unknownsearchblox searchblox Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 13.98%Nov 13, 2023
- Unknownagentejo cockpit Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 50.26%Nov 13, 2023
- Unknownsonarsource sonarqube Missing Authentication for Critical FunctionPatch nowKEVEPSS 15.97%Nov 13, 2023
- Unknownkyocera d-copia253mf_plus_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 37.02%Nov 13, 2023
- Unknownphpgurukul hospital_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 6.35%Nov 13, 2023
- Unknownmyucms_project myucms Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 3.23%Nov 13, 2023
- UnknownWSO2 api_manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 26.22%Nov 13, 2023
- UnknownrConfig rConfig Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 87.33%Nov 13, 2023
- Unknownnortekcontrol linear_emerge_essential_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 81.87%Nov 13, 2023
- Unknownyouphptube youphptube_encoder Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 45.30%Nov 13, 2023
- Unknowndedecms dedecms Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 74.12%Nov 13, 2023
- UnknownElastic Kibana External Control of File Name or PathPatch nowKEVEPSS 82.25%Nov 13, 2023
- Unknownboa boa Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 68.46%Nov 13, 2023
- UnknownNETGEAR readynas_surveillance_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 8.17%Nov 13, 2023
- UnknownSynacor Zimbra Collaboration Suite (ZCS) Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 86.31%Nov 13, 2023
- UnknownApache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 6.71%Nov 9, 2023
- Critical9.8SysAid Server Path Traversal VulnerabilityPatch nowKEVEPSS 98.85%Nov 8, 2023
- Critical9.8Atlassian Confluence Data Center and Server Improper Authorization VulnerabilityPatch nowKEVEPSS 100.00%Oct 31, 2023
- UnknownCitrix SD-WAN and NetScaler Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 42.55%Oct 31, 2023
- Unknown10Web Booster WordPress plugin AJAX actions VulnerabilityPatch nowKEVEPSS 2.79%Oct 29, 2023
- Critical9.8Apache ActiveMQ Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.89%Oct 27, 2023
- High8.8F5 BIG-IP Configuration Utility SQL Injection VulnerabilityPatch nowKEVEPSS 4.47%Oct 26, 2023
- Critical9.8F5 BIG-IP Configuration Utility Authentication Bypass VulnerabilityPatch nowKEVEPSS 96.52%Oct 26, 2023
- Critical9.8NextGen Healthcare Mirth Connect Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 82.71%Oct 26, 2023