Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownopensuse leap Missing AuthorizationPatch nowKEVEPSS 14.95%Jan 26, 2022
- Medium5.3Zabbix Frontend Improper Access Control VulnerabilityPatch nowKEVEPSS 95.26%Jan 13, 2022
- Critical9.8Zabbix Frontend Authentication Bypass VulnerabilityPatch nowKEVEPSS 95.68%Jan 13, 2022
- High7.1Microsoft Windows AppX Installer Spoofing VulnerabilityPatch nowKEVEPSS 11.29%Dec 14, 2021
- Unknownautomattic wp_super_cache Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 27.67%Dec 9, 2021
- Unknownmetagauss registrationmagic Improper AuthenticationPatch nowKEVEPSS 6.84%Dec 8, 2021
- Unknownpublishpress capabilities Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 6.69%Dec 6, 2021
- Unknownw3eden download_manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.62%Nov 29, 2021
- Unknowngpononu 1ge_router_wifi_onu_v2801rw_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 45.72%Nov 11, 2021
- Unknownlegalweb wp_dsgvo_tools Improper Access ControlPatch nowKEVEPSS 3.84%Nov 2, 2021
- UnknownPHP-Fusion 9.03.50 downloads/downloads.php Authenticated Remote Code ExecutionPatch nowKEVEPSS 67.52%Sep 16, 2021
- High8.8SAP NetWeaver Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 36.90%Sep 14, 2021
- High8.8Microsoft MSHTML Remote Code Execution VulnerabilityPatch nowKEVEPSS 97.84%Sep 7, 2021
- UnknownPinterest Automatic plugin for WordPress Authorization BypassPatch nowKEVEPSS 4.49%Sep 6, 2021
- UnknownZTE F460 and F660 Cable Modems web_shell_cmd.gch Security BypassPatch nowKEVEPSS 59.26%Aug 19, 2021
- UnknownMicrosoft Edge Scripting Engine Memory Corruption VulnerabilityPatch nowKEVEPSS 48.17%Aug 17, 2021
- UnknownMicrosoft Edge Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 15.23%Aug 17, 2021
- UnknownMicrosoft Edge Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 26.37%Aug 17, 2021
- UnknownVMware Workspace ONE Access, Identity Manager and vRealize Authentication Bypass VulnerabilityPatch nowKEVEPSS 56.31%Aug 12, 2021
- Critical9.8Kaseya Virtual System/Server Administrator (VSA) Information Disclosure VulnerabilityPatch nowKEVEPSS 85.73%Jul 2, 2021
- UnknownWestern Digital wd_my_book_live_firmware Missing Authentication for Critical FunctionPatch nowKEVEPSS 12.71%Jun 29, 2021
- UnknownProfilePress WordPress plugin ~/src/Classes/EditUserProfile.php Priviledge Escalation VulnerabilityPatch nowKEVEPSS 4.12%Jun 28, 2021
- Unknownvestacp control_panel Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')Patch nowKEVEPSS 6.39%Jun 3, 2021
- Unknownmagmi_project magmi Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 14.72%Jun 1, 2021
- High7.2Ivanti Pulse Connect Secure Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 14.15%May 27, 2021
Sort