Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownVMware ESXi, Workstation, and Fusion XHCI USB Controller VulnerabilityPatch nowKEVEPSS 3.54%Sep 11, 2024
- High7.2Ivanti Cloud Services Appliance OS Command Injection VulnerabilityPatch nowKEVEPSS 88.53%Sep 10, 2024
- Critical9.8Cisco Smart Licensing Utility Static Credential VulnerabilityPatch nowKEVEPSS 97.09%Sep 4, 2024
- UnknownFastAdmin /index/ajax/lang Directory Traversal VulnerabilityPatch nowKEVEPSS 16.88%Aug 29, 2024
- High7.2Versa Director Dangerous File Type Upload VulnerabilityPatch nowKEVEPSS 4.01%Aug 22, 2024
- UnknownTOTOLINK EX1800T apcliEncrypType VulnerabilityPatch nowKEVEPSS 3.82%Aug 13, 2024
- High7.2Mitel SIP Phones Argument Injection VulnerabilityPatch nowKEVEPSS 41.65%Aug 12, 2024
- High7.2TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 1.79%Aug 12, 2024
- Critical9.8Ivanti Virtual Traffic Manager Authentication Bypass VulnerabilityPatch nowKEVEPSS 100.00%Aug 6, 2024
- UnknownServiceNow Washington DC, Vancouver, and Utah Now Platform Administrative User Information Disclosure VulnerabilityPatch nowKEVEPSS 33.59%Jul 23, 2024
- Unknownthinkadmin thinkadmin Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 75.33%Jul 21, 2024
- UnknownOSGeo GeoServer Improper Input ValidationPatch nowKEVEPSS 1.56%Jul 16, 2024
- UnknownUnauthenticated Privilege Escalation in Profile-Builder pluginPatch nowKEVEPSS 0.80%Jul 15, 2024
- Critical9.3Palo Alto Networks Expedition Missing Authentication VulnerabilityPatch nowKEVEPSS 91.68%Jul 10, 2024
- Unknownwebnus modern_events_calendar Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.12%Jul 8, 2024
- Unknownchurch_admin_project church_admin Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.54%Jul 4, 2024
- Medium6.7Cisco NX-OS Command Injection VulnerabilityPatch nowKEVEPSS 4.31%Jul 1, 2024
- UnknownZoho ManageEngine ADManager Plus Authenticated VulnerabilityPatch nowKEVEPSS 11.13%Jul 1, 2024
- Unknowncoffee_shop_pos_system_project coffee_shop_pos_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.64%Jun 26, 2024
- UnknownCrestron hd-md4x2-4k-e_firmware Improper AuthenticationPatch nowKEVEPSS 75.16%Jun 26, 2024
- UnknownFortinet FortiOS and FortiProxy Backup File Weak Key VulnerabilityPatch nowKEVEPSS 3.47%Jun 13, 2024
- UnknownInstaWP Connect - 1-click WP Staging & Migration plugin for WordPress REST API VulnerabilityPatch nowKEVEPSS 4.16%Jun 12, 2024
- UnknownLogin/Signup Popup ( Inline Form + Woocommerce ) plugin for WordPress import_settings VulnerabilityPatch nowKEVEPSS 1.51%Jun 5, 2024
- UnknownLinksys RE7000 AccessControlList VulnerabilityPatch nowKEVEPSS 16.52%May 22, 2024
- Unknownruijie rg-ew1200g_firmware Improper Access ControlPatch nowKEVEPSS 23.06%May 22, 2024
Sort