Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Dahua IP Camera Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.59%Sep 15, 2021
- Critical9.8Dahua IP Camera Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.99%Sep 15, 2021
- UnknownMicrosoft Windows Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 10.71%Aug 19, 2021
- High7.5libcurl-using applications can ask for a specific client certificate to be used in a transfer.Check this weekEPSS 15.14%Aug 5, 2021
- Medium6.5When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink XML file…Check if you run itEPSS 4.33%Aug 5, 2021
- UnknownKaseya vsa Incorrect Resource Transfer Between SpheresPatch nowKEVEPSS 5.70%Jul 6, 2021
- Critical9.8Kaseya Virtual System/Server Administrator (VSA) Information Disclosure VulnerabilityPatch nowKEVEPSS 85.73%Jul 2, 2021
- High8.1curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection.Check this weekEPSS 63.53%Jun 11, 2021
- Unknownmagmi_project magmi Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 14.72%Jun 1, 2021
- Critical9.8VMware vCenter Server Improper Input Validation VulnerabilityPatch nowKEVEPSS 100.00%May 26, 2021
- Medium6.1An exploitable denial-of-service vulnerability exists in Systemd 245.Check if you run itEPSS 1.43%May 10, 2021
- Critical9.8A flaw was found in gnutls.Check if you run itEPSS 3.48%Mar 12, 2021
- Critical9.8A flaw was found in gnutls.Check if you run itEPSS 3.80%Mar 12, 2021
- High8.8Veritas Backup Exec Agent Command Execution VulnerabilityPatch nowKEVEPSS 23.95%Mar 1, 2021
- High8.1Veritas Backup Exec Agent File Access VulnerabilityPatch nowKEVEPSS 13.52%Mar 1, 2021
- Medium5.3VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 88.01%Feb 24, 2021
- Critical9.8VMware vCenter Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.87%Feb 24, 2021
- UnknownIBM Tivoli Monitoring Portal v6 HTTP Arbitrary Command Execution VulnerabilityPatch nowKEVEPSS 8.54%Jan 21, 2021
- High7.5An issue was discovered in p11-kit 0.23.6 through 0.23.21.Check if you run itEPSS 3.53%Dec 16, 2020
- Medium5.3An issue was discovered in p11-kit 0.21.1 through 0.23.21.Check if you run itEPSS 2.27%Dec 16, 2020
- Critical9.8SaltStack Salt Shell Injection VulnerabilityPatch nowKEVEPSS 99.59%Nov 6, 2020
- High7.1Samsung Mobile Devices Improper Access Control VulnerabilityPatch nowKEVEPSS 2.81%Nov 3, 2020
- Medium6.1Cisco ASA and FTD Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 85.58%Oct 21, 2020
- High7.2http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP reques…Check if you run itEPSS 6.42%Sep 27, 2020
- High7.5An issue was discovered in GnuTLS before 3.6.15.Check if you run itEPSS 3.83%Sep 4, 2020