Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknowncodepress visitor_statistics Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 38.30%May 31, 2022
- UnknownVMware Spring Framework Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 13.23%May 31, 2022
- UnknownvSphere Web Client (FLEX/Flash) Unauthorized Arbitrary File Read VulnerabilityPatch nowKEVEPSS 4.67%May 31, 2022
- Unknownsixapart movable_type Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 88.14%May 31, 2022
- High7.8Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.16%May 30, 2022
- High8.1An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making…Check if you run itEPSS 2.52%May 26, 2022
- High7.8A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe post_one_notification() after free_pipe_in…Check if you run itEPSS 0.37%May 26, 2022
- UnknownZyxel nwa1100-nh_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 71.05%May 26, 2022
- Unknownkramerav viaware Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 54.39%May 26, 2022
- Unknownkramerav viaware Improper Privilege ManagementPatch nowKEVEPSS 70.75%May 26, 2022
- Unknownthedaylightstudio Fuel CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 82.94%May 26, 2022
- UnknownHCSEC-2022-14 - Nomad Impacted by go-getter VulnerabilitiesCheck if you run itEPSS 1.42%May 24, 2022
- UnknownCVE-2022-30323 is listed by HCSEC-2022-13 - Multiple Vulnerabilities In go-getter Library.Check if you run itEPSS 1.46%May 24, 2022
- UnknownCVE-2022-30322 is listed by HCSEC-2022-13 - Multiple Vulnerabilities In go-getter Library.Check if you run itEPSS 1.46%May 24, 2022
- UnknownCVE-2022-30321 is listed by HCSEC-2022-13 - Multiple Vulnerabilities In go-getter Library.Check if you run itEPSS 3.11%May 24, 2022
- UnknownCVE-2022-26945 is listed by HCSEC-2022-13 - Multiple Vulnerabilities In go-getter Library.Check if you run itEPSS 1.74%May 24, 2022
- Medium4.3Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-serverCheck if you run itEPSS 1.15%May 23, 2022
- High8.8WebKitGTK Memory Corruption VulnerabilityPatch nowKEVEPSS 1.56%May 23, 2022
- Medium5.3Zoho ManageEngine ADSelfService Plus Username EnumerationPatch nowKEVEPSS 10.03%May 20, 2022
- Medium6.5Cisco IOS XR Open Port VulnerabilityPatch nowKEVEPSS 11.47%May 20, 2022
- Unknownweblizar school_management Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 64.08%May 20, 2022
- Critical9.1QNAP Photo Station Externally Controlled Reference VulnerabilityPatch nowKEVEPSS 87.91%May 18, 2022
- Critical9.8dotCMS Unrestricted Upload of File VulnerabilityPatch nowKEVEPSS 91.25%May 18, 2022
- UnknownApple iphone_os Out-of-bounds ReadPatch nowKEVEPSS 11.03%May 18, 2022
- High7.8A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some…Check if you run itEPSS 0.81%May 16, 2022
Sort