Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMicrosoft Exchange Server Privilege EscalationPatch nowKEVEPSS 4.38%Sep 14, 2022
- UnknownMicrosoft Exchange Server Privilege EscalationPatch nowKEVEPSS 1.23%Sep 14, 2022
- High7.2Trend Micro Apex One and Apex One as a Service Improper Validation VulnerabilityPatch nowKEVEPSS 3.29%Sep 13, 2022
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityPatch nowKEVEPSS 28.27%Sep 13, 2022
- UnknownWordPress WPGateway Plugin Privilege EscalationPatch nowKEVEPSS 9.21%Sep 13, 2022
- High7.8Apple iOS, iPadOS, and macOS Remote Code Execution VulnerabilityPatch nowKEVEPSS 5.60%Sep 12, 2022
- Unknownnajeebmedia frontend_file_manager Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.64%Sep 7, 2022
- Unknownnajeebmedia frontend_file_manager Missing AuthorizationPatch nowKEVEPSS 8.26%Sep 7, 2022
- Unknowngeneralbytes crypto_application_server Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.66%Sep 2, 2022
- Critical9.6Google Chromium Mojo Insufficient Data Validation VulnerabilityPatch nowKEVEPSS 5.85%Aug 30, 2022
- Critical9.8D-Link Routers Buffer Overflow VulnerabilityPatch nowKEVEPSS 55.53%Aug 28, 2022
- High7.5ZK Framework AuUploader Unspecified VulnerabilityPatch nowKEVEPSS 95.40%Aug 26, 2022
- UnknownDocker docker Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 98.45%Aug 25, 2022
- High8.8Atlassian Bitbucket Server and Data Center Command Injection VulnerabilityPatch nowKEVEPSS 99.17%Aug 24, 2022
- UnknownTOTOLINK t6_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 2.99%Aug 19, 2022
- UnknownTP-Link tl-wr840n_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 40.15%Aug 19, 2022
- Unknownvoipmonitor voipmonitor Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 49.99%Aug 19, 2022
- UnknownWordPress wordpress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 64.53%Aug 19, 2022
- UnknownOracle WebLogic Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 92.65%Aug 19, 2022
- UnknownTOTOLINK ex200_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 37.84%Aug 19, 2022
- UnknownBeyondTrust appliance_base_software Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 25.99%Aug 19, 2022
- UnknownEclipse Jetty ConcatServlet VulnerabilityPatch nowKEVEPSS 78.48%Aug 19, 2022
- Unknowngetperfectsurvey perfect_survey Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 86.78%Aug 19, 2022
- UnknownLantronix premierwave_2050_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 36.94%Aug 19, 2022
- UnknownNETGEAR rax43 Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 7.16%Aug 19, 2022