Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8A vulnerability in the Do Not Decrypt exclusion feature of the SSL decryption feature of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remoteCheck if you run itEPSS 0.43%Mar 4, 2026
- Medium5.9A vulnerability in the sftunnel functionality of Cisco Secure Firewall Management Center (FMC) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an autheCheck if you run itEPSS 0.47%Mar 4, 2026
- Medium5.3A vulnerability in the Remote Access SSL VPN, HTTP management and MUS functionality, of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall ThreatCheck if you run itEPSS 0.37%Mar 4, 2026
- High8.6A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to causeCheck if you run itEPSS 0.40%Mar 4, 2026
- High7.7A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (Check if you run itEPSS 0.33%Mar 4, 2026
- High8.6A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unaCheck if you run itEPSS 0.41%Mar 4, 2026
- Medium5.3ClamAV: Schwachstelle ermöglicht Denial of ServiceCheck if you run itEPSS 0.47%Mar 4, 2026
- Critical9.8SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API endpointCheck if you run itEPSS 0.89%Mar 4, 2026
- Critical9.8An issue in the HwRwDrv.sys component of Nil Hardware Editor Hardware Read & Write Utility v1.25.11.26 and earlier allows attackers to execute arbitrary read and write…Check if you run itEPSS 0.74%Mar 4, 2026
- High8.8Ashop Shopping Cart Software contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'shop' pCheck if you run itEPSS 0.27%Mar 4, 2026
- High8.8FreeSMS 2.1.2 contains a boolean-based blind SQL injection vulnerability in the password parameter that allows unauthenticated attackers to bypass authentication by injecting SQL cCheck if you run itEPSS 0.52%Mar 4, 2026
- High7.1Tradebox 5.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the symbol parameter.Check if you run itEPSS 0.33%Mar 4, 2026
- High8.8NCrypted Jobgator contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the experience parameteCheck if you run itEPSS 0.27%Mar 4, 2026
- High7.1PHPads 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the bannerID parameterCheck if you run itEPSS 0.38%Mar 4, 2026
- Medium5.3A vulnerability in the implementation of the proprietary SSH stack with SSH key-based authentication in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software could allowCheck if you run itEPSS 0.44%Mar 4, 2026
- High7.8Dell Device Management Agent (DDMA), versions prior to 26.02, contain an Incorrect Authorization vulnerability.Check if you run itEPSS 0.11%Mar 4, 2026
- Medium6.5A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.Check if you run itEPSS 0.38%Mar 4, 2026
- Medium5.8Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine tCheck if you run itEPSS 0.56%Mar 4, 2026
- Medium5.5Dell Device Management Agent (DDMA), versions prior to 26.02, contain an Improper Check for Unusual or Exceptional Conditions vulnerability.Check if you run itEPSS 0.14%Mar 4, 2026
- Medium6.9Craft is a content management system (CMS).Check if you run itEPSS 0.32%Mar 4, 2026
- High8.6Craft is a content management system (CMS).Check if you run itEPSS 0.59%Mar 4, 2026
- Critical9.4Craft is a content management system (CMS).Check if you run itEPSS 0.51%Mar 4, 2026
- Medium5.3Craft is a content management system (CMS).Check if you run itEPSS 0.27%Mar 4, 2026
- High7.1Craft is a content management system (CMS).Check if you run itEPSS 0.39%Mar 4, 2026
- Critical9.4Craft is a content management system (CMS).Check if you run itEPSS 1.19%Mar 4, 2026
Sort