Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Server-Side Request Forgery (SSRF) vulnerability in Apache HertzBeat.Check this weekEPSS 66.00%Apr 16, 2025
- UnknownApache camel Improper Handling of Case SensitivityPatch nowKEVEPSS 97.06%Apr 7, 2025
- UnknownApache pyarrow Deserialization of Untrusted DataPatch nowKEVEPSS 14.53%Mar 16, 2025
- Critical9.8Apache Tomcat Path Equivalence VulnerabilityPatch nowKEVEPSS 99.93%Mar 10, 2025
- Unknownmod_authnz_external_project mod_authnz_external Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.66%Feb 7, 2025
- UnknownApache Struts File Upload VulnerabilityPatch nowKEVEPSS 70.14%Dec 15, 2024
- UnknownApache OFBiz Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 93.23%Dec 5, 2024
- UnknownSecurity exception in org.apache.lucene.util.ArrayUtil.growExactOpen the advisoryNov 1, 2024
- UnknownApache Solr Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 56.26%Sep 19, 2024
- UnknownApache Solr Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 83.72%Sep 18, 2024
- UnknownApache RocketMQ Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 90.43%Sep 18, 2024
- UnknownApache nifi Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.90%Sep 18, 2024
- High7.5Apache OFBiz Forced Browsing VulnerabilityPatch nowKEVEPSS 99.98%Sep 4, 2024
- UnknownApache OFBiz Improper Restricted Pathname Limitation VulnerabilityPatch nowKEVEPSS 87.88%Aug 19, 2024
- Critical9.8Apache OFBiz Incorrect Authorization VulnerabilityPatch nowKEVEPSS 99.43%Aug 5, 2024
- UnknownApache HTTP Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')Patch nowKEVEPSS 84.51%Jul 25, 2024
- Critical9.1Apache HTTP Server Improper Escaping of Output VulnerabilityPatch nowKEVEPSS 99.96%Jul 1, 2024
- Critical9.8PHP-CGI OS Command Injection VulnerabilityPatch nowKEVEPSS 99.99%Jun 7, 2024
- UnknownApache kafka_connect Deserialization of Untrusted DataPatch nowKEVEPSS 95.81%May 10, 2024
- UnknownApache Spark Missing Authentication for Critical FunctionPatch nowKEVEPSS 29.37%May 10, 2024
- UnknownApache dubbo Deserialization of Untrusted DataPatch nowKEVEPSS 36.51%May 10, 2024
- Critical9.8Apache OFBiz Path Traversal VulnerabilityPatch nowKEVEPSS 99.92%May 8, 2024
- Critical9.8Apache HugeGraph-Server Improper Access Control VulnerabilityPatch nowKEVEPSS 99.21%Apr 22, 2024
- UnknownApache Struts Improper Input ValidationPatch nowKEVEPSS 87.12%Apr 15, 2024
- Unknownwp3dprinting 3dprint_lite Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 6.65%Mar 4, 2024