Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownApache Struts Improper Input ValidationPatch nowKEVEPSS 87.12%Apr 15, 2024
- Unknownwp3dprinting 3dprint_lite Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 6.65%Mar 4, 2024
- UnknownApache Struts Files or Directories Accessible to External PartiesPatch nowKEVEPSS 80.82%Jan 31, 2024
- UnknownApache OFBiz Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 63.37%Jan 21, 2024
- UnknownApache OFBiz Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 96.00%Jan 2, 2024
- UnknownApache OFBiz Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 95.37%Dec 29, 2023
- UnknownApache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 90.65%Dec 19, 2023
- Medium5.9OpenBSD openssh Improper Validation of Integrity Check ValuePatch nowKEVEPSS 93.55%Dec 18, 2023
- UnknownApache Airflow Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 77.88%Dec 8, 2023
- UnknownApache shenyu Improper AuthenticationPatch nowKEVEPSS 41.85%Dec 5, 2023
- UnknownApache OFBiz Deserialization of Untrusted DataPatch nowKEVEPSS 97.82%Dec 5, 2023
- UnknownApache OFBiz Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 97.31%Dec 5, 2023
- UnknownApache ActiveMQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 55.42%Dec 5, 2023
- UnknownApache Tika versions 1.7 to 1.17 Command InjectionPatch nowKEVEPSS 93.55%Dec 5, 2023
- UnknownApache tapestry Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 93.56%Dec 3, 2023
- UnknownApache Flink Relative Path TraversalPatch nowKEVEPSS 51.40%Nov 25, 2023
- UnknownApache cocoon Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 72.46%Nov 25, 2023
- UnknownApache OFBiz Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 15.91%Nov 21, 2023
- UnknownApache CouchDB Improper Privilege ManagementPatch nowKEVEPSS 99.84%Nov 17, 2023
- UnknownApache Axis2 dswsbobje.war Remote Code ExecutionPatch nowKEVEPSS 90.85%Nov 15, 2023
- Unknownroxy-wi roxy-wi Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 52.65%Nov 13, 2023
- UnknownApache Druid 0.20.0 Remote Command ExecutionPatch nowKEVEPSS 99.00%Nov 13, 2023
- UnknownApache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 6.71%Nov 9, 2023
- Critical9.8Apache ActiveMQ Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.89%Oct 27, 2023
- UnknownSecurity exception in org.apache.poi.ddf.EscherPropertyFactory$$Lambda$285/ADDRESS.applyOpen the advisoryOct 3, 2023