Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8SolarView Compact Command Injection VulnerabilityPatch nowKEVEPSS 98.04%May 12, 2022
- Critical9.8Zyxel Multiple Firewalls OS Command Injection VulnerabilityPatch nowKEVEPSS 99.94%May 12, 2022
- Critical9.8mingsoft mcms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.46%May 11, 2022
- UnknownApache Struts Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')Patch nowKEVEPSS 85.43%May 11, 2022
- UnknownApache Struts CookieInterceptor VulnerabilityPatch nowKEVEPSS 78.32%May 11, 2022
- UnknownApache Struts ParametersInterceptor ClassLoader Maniupulation VulnerabilityPatch nowKEVEPSS 98.06%May 11, 2022
- UnknownApache Struts ParametersInterceptor VulnerabilityPatch nowKEVEPSS 99.39%May 11, 2022
- UnknownPortable phpMyAdmin Plugin before 1.3.1 for WordPress Authentication BypassPatch nowKEVEPSS 23.75%May 11, 2022
- High8.8Microsoft Active Directory Domain Services Privilege Escalation VulnerabilityPatch nowKEVEPSS 83.50%May 10, 2022
- Medium5.9Microsoft Windows LSA Spoofing VulnerabilityPatch nowKEVEPSS 10.48%May 10, 2022
- Critical9.8pluginbazaar order_listener_for_woocommerce Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 9.88%May 9, 2022
- High7.5RARLAB UnRAR Directory Traversal VulnerabilityPatch nowKEVEPSS 99.23%May 9, 2022
- Critical9.8In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query.Check this weekEPSS 64.49%May 4, 2022
- High7.5The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries.Check if you run itEPSS 4.68%May 3, 2022
- Medium5.9The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key.Check if you run itEPSS 1.23%May 3, 2022
- Medium5.3The function verifies the signer certificate on an OCSP response.Check if you run itEPSS 2.14%May 3, 2022
- High7.3The c_rehash script does not properly sanitise shell metacharacters to prevent command injection.Check this weekEPSS 82.61%May 3, 2022
- Medium6.5In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows.Check if you run itEPSS 3.75%May 3, 2022
- Critical9.810web photo_gallery Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 43.35%May 2, 2022
- UnknownCloudways Breeze Plugin Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 0.57%May 2, 2022
- Medium6.6A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem.Check if you run itEPSS 1.49%Apr 29, 2022
- UnknownApache log4j Deserialization of Untrusted DataPatch nowKEVEPSS 80.60%Apr 26, 2022
- Critical9.8Mitel MiVoice Connect Data Validation VulnerabilityPatch nowKEVEPSS 55.24%Apr 25, 2022
- Medium6.1welaunch wordpress_country_selector Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.40%Apr 25, 2022
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 17.63%Apr 20, 2022
Sort