Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited onlyCheckedFix range storedEPSS

Reset

High8.8Google Chromium V8 Out-of-Bounds Write VulnerabilityVuln · CVE-2021-30632 · Google · Chromium V8 · CISA KEV · CVE.org · FIRST EPSS · Chrome, GooglePatch nowKEVEPSS 63.19%Sep 8, 2021
Critical9.8Zoho ManageEngine ADSelfService Plus Authentication Bypass VulnerabilityVuln · CVE-2021-40539 · Zoho · ManageEngine · CISA KEV · CVE.org · FIRST EPSS · ManageEnginePatch nowKEVEPSS 98.96%Sep 7, 2021
High8.8Microsoft MSHTML Remote Code Execution VulnerabilityVuln · CVE-2021-40444 · Microsoft · MSHTML · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 97.84%Sep 7, 2021
Critical9.8Zoho ManageEngine ServiceDesk Authentication Bypass VulnerabilityVuln · CVE-2021-37415 · Zoho · ManageEngine ServiceDesk Plus (SDP) · CISA KEV · CVE.org · FIRST EPSS · ManageEnginePatch nowKEVEPSS 99.83%Aug 31, 2021
Critical9.8Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection VulnerabilityVuln · CVE-2021-26084 · Cloudflare · Confluence Server and Data Center · CISA KEV · Cloudflare WAF rules · CVE.org · Atlassian, ConfluencePatch nowKEVEPSS 100.00%Aug 30, 2021
Critical9.1October CMS Improper AuthenticationVuln · CVE-2021-32648 · October CMS · October CMS · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 90.42%Aug 26, 2021
High7.5A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query.Vuln · CVE-2021-36690 · sqlite · sqlite · CVE.org · FIRST EPSS · NIST NVDCheck if you run itEPSS 3.90%Aug 24, 2021
High7.5Apple iOS, macOS, watchOS Sandbox Bypass VulnerabilityVuln · CVE-2021-31010 · Apple · iOS, macOS, watchOS · CISA KEV · CVE.org · FIRST EPSS · Apple, iOSPatch nowKEVEPSS 3.67%Aug 24, 2021
High7.8Apple iOS and iPadOS Buffer Overflow VulnerabilityVuln · CVE-2021-30983 · Apple · iOS and iPadOS · CISA KEV · CVE.org · FIRST EPSS · Apple, iOSPatch nowKEVEPSS 2.92%Aug 24, 2021
High7.8Apple Multiple Products Integer Overflow or Wraparound VulnerabilityVuln · CVE-2021-30952 · Apple · Multiple Products · CISA KEV · CVE.org · FIRST EPSS · ApplePatch nowKEVEPSS 6.96%Aug 24, 2021
High7.8Apple iOS, iPadOS, and macOS Out-of-Bounds Write VulnerabilityVuln · CVE-2021-30900 · Apple · iOS, iPadOS, and macOS · CISA KEV · CVE.org · FIRST EPSS · Apple, iOSPatch nowKEVEPSS 5.20%Aug 24, 2021
High7.8Apple Multiple Products Memory Corruption VulnerabilityVuln · CVE-2021-30883 · Apple · Multiple Products · CISA KEV · CVE.org · FIRST EPSS · Apple, iOSPatch nowKEVEPSS 14.72%Aug 24, 2021
High7.8Apple iOS, iPadOS, and macOS Type Confusion VulnerabilityVuln · CVE-2021-30869 · Apple · iOS, iPadOS, and macOS · CISA KEV · CVE.org · FIRST EPSS · Apple, iOSPatch nowKEVEPSS 4.13%Aug 24, 2021
High7.8Apple Multiple Products Integer Overflow VulnerabilityVuln · CVE-2021-30860 · Apple · Multiple Products · CISA KEV · CVE.org · FIRST EPSS · Apple, iOSPatch nowKEVEPSS 75.99%Aug 24, 2021
High8.8Apple iOS, iPadOS, macOS Use-After-Free VulnerabilityVuln · CVE-2021-30858 · Apple · iOS, iPadOS, and macOS · CISA KEV · CVE.org · FIRST EPSS · Apple, iOSPatch nowKEVEPSS 13.38%Aug 24, 2021
High8.5XStream XStream Deserialization of Untrusted DataVuln · CVE-2021-39152 · xstream · xstream · CVE.org · FIRST EPSS · NIST NVDPatch nowKEVEPSS 11.38%Aug 23, 2021
High8.5XStream Remote Code Execution VulnerabilityVuln · CVE-2021-39144 · XStream · XStream · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 98.12%Aug 23, 2021
Medium6.5The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inn…Vuln · CVE-2021-37750 · mit · kerberos 5 · CVE.org · FIRST EPSS · NIST NVDCheck if you run itEPSS 2.50%Aug 23, 2021
Critical9.8Realtek AP-Router SDK Buffer Overflow VulnerabilityVuln · CVE-2021-35395 · Realtek · AP-Router SDK · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 98.10%Aug 16, 2021
Critical9.8Realtek Jungle SDK Remote Code Execution VulnerabilityVuln · CVE-2021-35394 · Realtek · Jungle Software Development Kit (SDK) · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 99.88%Aug 16, 2021
Medium5.3Atlassian Jira Server and Data Center Path Traversal VulnerabilityVuln · CVE-2021-26086 · Atlassian · Jira Server and Data Center · CISA KEV · CVE.org · FIRST EPSS · Atlassian, JiraPatch nowKEVEPSS 100.00%Aug 15, 2021
Critical9.8Sunhillo SureLine OS Command Injection VulnerablityVuln · CVE-2021-36380 · Sunhillo · SureLine · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 97.83%Aug 13, 2021
High7.5In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference.Vuln · CVE-2021-38604 · gnu · glibc · CVE.org · FIRST EPSS · NIST NVD · LinuxCheck if you run itEPSS 3.72%Aug 12, 2021
High7.5Microsoft Windows Local Security Authority (LSA) Spoofing VulnerabilityVuln · CVE-2021-36942 · Microsoft · Windows · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 66.02%Aug 12, 2021
High7.8Microsoft Windows Event Tracing Privilege Escalation VulnerabilityVuln · CVE-2021-34486 · Microsoft · Windows · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 9.25%Aug 12, 2021

Sort