Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8ASUS Routers Improper Authentication VulnerabilityPatch nowKEVEPSS 99.39%May 6, 2021
- Unknownwpengine wpgraphql Missing Authentication for Critical FunctionPatch nowKEVEPSS 46.61%Apr 12, 2021
- Critical9.8SonicWall Email Security Improper Privilege Management VulnerabilityPatch nowKEVEPSS 88.78%Apr 9, 2021
- High7.5VMware Server Side Request Forgery in vRealize Operations Manager APIPatch nowKEVEPSS 78.00%Mar 31, 2021
- Unknownposimyth the_plus_addons_for_elementor Improper AuthenticationPatch nowKEVEPSS 14.46%Mar 8, 2021
- Critical9.8Accellion FTA OS Command Injection VulnerabilityPatch nowKEVEPSS 56.69%Feb 16, 2021
- High7.2Adminer Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 98.46%Feb 11, 2021
- Critical9.8Zyxel Multiple Products Use of Hard-Coded Credentials VulnerabilityPatch nowKEVEPSS 90.16%Dec 22, 2020
- Unknownasustor asustor_data_master Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 11.13%Dec 14, 2020
- Unknownwp-ecommerce easy_wp_smtp Insertion of Sensitive Information into Log FilePatch nowKEVEPSS 60.38%Dec 13, 2020
- Critical9.8CyberoamOS (CROS) SQL Injection VulnerabilityPatch nowKEVEPSS 4.70%Dec 11, 2020
- Unknowngvectors wpdiscuz Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 12.61%Dec 6, 2020
- Unknownavinu phpMyAdmin Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 60.99%Dec 1, 2020
- Unknownrocketsoftware rocket_servergraph Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 72.61%Dec 1, 2020
- UnknownApple darwin_streaming_server Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 68.86%Dec 1, 2020
- Critical9.1Multiple VMware Products Command Injection VulnerabilityPatch nowKEVEPSS 17.30%Nov 23, 2020
- UnknownUltimate Member ultimate_member Improper Privilege ManagementPatch nowKEVEPSS 8.46%Nov 9, 2020
- High7.2Ivanti Pulse Connect Secure Code Execution VulnerabilityPatch nowKEVEPSS 96.48%Oct 28, 2020
- High7.2Ivanti Pulse Connect Secure Code Execution VulnerabilityPatch nowKEVEPSS 90.76%Sep 30, 2020
- Critical9.8Sophos SG UTM Remote Code Execution VulnerabilityPatch nowKEVEPSS 96.75%Sep 24, 2020
- Medium4.2Microsoft Edge and Internet Explorer Memory Corruption VulnerabilityPatch nowKEVEPSS 2.70%Sep 11, 2020
- High7.5D-Link DCS-2530L and DCS-2670L Devices Unspecified VulnerabilityPatch nowKEVEPSS 97.51%Sep 2, 2020
- High8.8TP-link TL-WA855RE Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 22.19%Aug 31, 2020
- UnknownCalmar Webmedia Total Donations plugin through 2.0.5 for WordPress migla_ajax_functions.php Security BypassPatch nowKEVEPSS 26.08%Aug 22, 2020
- Medium5.5Microsoft Netlogon Privilege Escalation VulnerabilityPatch nowKEVEPSS 99.39%Aug 17, 2020
Sort