Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownKaseya Virtual System/Server Administrator (VSA) URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 10.32%Dec 15, 2023
- UnknownF5 big-ip_access_policy_manager Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 76.87%Dec 13, 2023
- Unknownnetsweeper netsweeper Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 94.97%Dec 11, 2023
- High7.2SonicWall SMA100 Appliances OS Command Injection VulnerabilityPatch nowKEVEPSS 76.25%Dec 5, 2023
- UnknownApache shenyu Improper AuthenticationPatch nowKEVEPSS 42.12%Dec 5, 2023
- UnknownApache ActiveMQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 55.42%Dec 5, 2023
- Unknownsecurepoint unified_threat_management Incorrect AuthorizationPatch nowKEVEPSS 3.92%Dec 4, 2023
- Unknownthedigitalcraft atomcms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 53.84%Dec 3, 2023
- UnknownFatPipe Networks WARP/IPVPN/MPVPN 10.2.2 Remote Privilege EscalationPatch nowKEVEPSS 1.66%Dec 2, 2023
- UnknownRuijie RG-EW1200G 1.0(1)B1P5 Access Control VulnerabilityPatch nowKEVEPSS 49.23%Dec 1, 2023
- Unknownalibaba nacos Authentication Bypass by SpoofingPatch nowKEVEPSS 83.48%Dec 1, 2023
- Unknownarticatech web_proxy Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 93.97%Dec 1, 2023
- Unknownbuddypress buddypress Incorrect AuthorizationPatch nowKEVEPSS 13.52%Nov 29, 2023
- Unknownlucee lucee_server Missing AuthorizationPatch nowKEVEPSS 89.19%Nov 29, 2023
- Critical9.8Unitronics Vision PLC and HMI Insecure Default Password VulnerabilityPatch nowKEVEPSS 2.09%Nov 28, 2023
- Unknownadmin_word_count_column_project admin_word_count_column Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 21.88%Nov 27, 2023
- UnknownJFrog Artifactory 6.7.3 X-Forwarded-For HTTP Header access-admin BypassPatch nowKEVEPSS 53.88%Nov 26, 2023
- Unknowncodemenschen gift_vouchers Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 49.92%Nov 26, 2023
- Unknownkubeview_project kubeview Missing Authentication for Critical FunctionPatch nowKEVEPSS 51.70%Nov 25, 2023
- Unknownmeritlilin p2r8852e2_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 2.08%Nov 25, 2023
- Unknownlimesurvey limesurvey Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 97.18%Nov 25, 2023
- Unknownuserproplugin userpro Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 6.75%Nov 22, 2023
- High7.5ownCloud graphapi Information Disclosure VulnerabilityPatch nowKEVEPSS 78.43%Nov 21, 2023
- UnknownApache CouchDB Improper Privilege ManagementPatch nowKEVEPSS 99.84%Nov 17, 2023
- Unknownspring-boot-actuator-logview_project spring-boot-actuator-logview Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 21.01%Nov 16, 2023
Sort