Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownapache2 CVE-2018-8011Patch nowKEVEPSS 55.61%Feb 22, 2022
- Unknownapache2 CVE-2018-1303Patch nowKEVEPSS 69.80%Feb 22, 2022
- Unknownapache2 CVE-2018-11763Patch nowKEVEPSS 50.85%Feb 22, 2022
- Unknownapache2 CVE-2017-9798Patch nowKEVEPSS 95.00%Feb 22, 2022
- UnknownApache HTTP Server Improper Input ValidationPatch nowKEVEPSS 56.77%Feb 22, 2022
- Unknownapache2 CVE-2017-7668Patch nowKEVEPSS 57.47%Feb 22, 2022
- Unknownapache2 CVE-2017-7659Patch nowKEVEPSS 53.94%Feb 22, 2022
- Unknownapache2 CVE-2017-15715Patch nowKEVEPSS 85.45%Feb 22, 2022
- Critical9.8Apache APISIX Authentication Bypass VulnerabilityPatch nowKEVEPSS 96.07%Feb 11, 2022
- UnknownApache log4j Improper Input ValidationPatch nowKEVEPSS 100.00%Dec 22, 2021
- Critical9.8SonicWall SMA 100 Appliances Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.91%Dec 8, 2021
- Critical9.0Apache Log4j2 Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.98%Dec 6, 2021
- Critical10.0Apache Log4j2 Remote Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Dec 6, 2021
- Critical9.8Apache HTTP Server Path Traversal VulnerabilityPatch nowKEVEPSS 99.96%Oct 7, 2021
- Critical9.8Apache HTTP Server Path Traversal VulnerabilityPatch nowKEVEPSS 99.99%Sep 29, 2021
- UnknownApache OFBiz Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 98.93%Sep 22, 2021
- Critical9.0Apache HTTP Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 100.00%Sep 16, 2021
- UnknownApache Shiro with Spring Dynamic Controllers Authentication BypassPatch nowKEVEPSS 23.33%Apr 12, 2021
- UnknownApache unomi Improper Input ValidationPatch nowKEVEPSS 68.30%Apr 12, 2021
- UnknownApache Unomi OGNL Scripting VulnerabilityPatch nowKEVEPSS 30.61%Apr 12, 2021
- UnknownApache olingo Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 12.25%Apr 12, 2021
- UnknownApache Tomcat Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 99.92%Apr 12, 2021
- UnknownApache Solr Deserialization of Untrusted DataPatch nowKEVEPSS 78.23%Apr 12, 2021
- High7.5When responding to new h2c connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41 and 8.5.0 to 8.5.61 could duplicate request headers and…Check this weekEPSS 18.11%Mar 1, 2021
- High7.5Apache Flink Improper Access Control VulnerabilityPatch nowKEVEPSS 97.81%Jan 5, 2021