Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Metabase GeoJSON API Local File Inclusion VulnerabilityPatch nowKEVEPSS 97.18%Nov 17, 2021
- High7.5GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segme…Check if you run itEPSS 4.46%Nov 15, 2021
- High7.5Microsoft Active Directory Domain Services Privilege Escalation VulnerabilityPatch nowKEVEPSS 77.17%Nov 9, 2021
- High7.5Microsoft Active Directory Domain Services Privilege Escalation VulnerabilityPatch nowKEVEPSS 73.30%Nov 9, 2021
- Medium5.5Microsoft Windows Installer Privilege Escalation VulnerabilityPatch nowKEVEPSS 19.45%Nov 9, 2021
- High8.8Microsoft Exchange Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 91.74%Nov 9, 2021
- High7.8Microsoft Excel Security Feature BypassPatch nowKEVEPSS 43.00%Nov 9, 2021
- High7.8Android Kernel Use-After-Free VulnerabilityPatch nowKEVEPSS 1.06%Nov 6, 2021
- Critical9.8Sitecore XP Remote Command Execution VulnerabilityPatch nowKEVEPSS 97.57%Nov 5, 2021
- Medium6.4Android Kernel Race Condition VulnerabilityPatch nowKEVEPSS 0.87%Nov 5, 2021
- High7.5In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit a spurious '\0' character via crafted ISO-2022-JP-3 data…Check if you run itEPSS 3.29%Nov 4, 2021
- High8.8Google Chromium V8 Memory Corruption VulnerabilityPatch nowKEVEPSS 38.57%Oct 26, 2021
- Critical9.8BQE BillQuick Web Suite SQL Injection VulnerabilityPatch nowKEVEPSS 74.43%Oct 22, 2021
- High7.5Draytek VigorConnect Path Traversal VulnerabilityPatch nowKEVEPSS 95.92%Oct 13, 2021
- High7.5Draytek VigorConnect Path Traversal VulnerabilityPatch nowKEVEPSS 89.65%Oct 13, 2021
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 1.58%Oct 12, 2021
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 1.58%Oct 12, 2021
- High7.8Microsoft Windows Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 81.94%Oct 12, 2021
- Critical9.8Apache HTTP Server Path Traversal VulnerabilityPatch nowKEVEPSS 99.96%Oct 7, 2021
- High7.3Grafana Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.93%Oct 5, 2021
- Critical9.8Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands vi…Check if you run itEPSS 3.50%Oct 1, 2021
- Medium6.1place placeos_authentication URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 12.06%Sep 30, 2021
- Medium5.9When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back m…Check if you run itEPSS 3.01%Sep 29, 2021
- High7.5A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server ( on the command line or set to or wit…Check if you run itEPSS 4.54%Sep 29, 2021
- Critical9.8Apache HTTP Server Path Traversal VulnerabilityPatch nowKEVEPSS 99.99%Sep 29, 2021
Sort