Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Docker Desktop Community Edition Privilege Escalation VulnerabilityPatch nowKEVEPSS 48.63%Aug 28, 2019
- UnknownGroup admins can create users with IDs of system foldersOpen the advisoryAug 12, 2019
- Critical9.8Atlassian Jira Server and Data Center Server-Side Template Injection VulnerabilityPatch nowKEVEPSS 84.62%Aug 9, 2019
- High7.2Apache Solr DataImportHandler Code Injection VulnerabilityPatch nowKEVEPSS 83.55%Aug 1, 2019
- Medium4.9An issue was discovered in the server in OpenLDAP before 2.4.48.Check if you run itEPSS 3.42%Jul 26, 2019
- Critical9.8Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows a remote attacker to restore a data…Check if you run itEPSS 2.22%Jun 28, 2019
- Unknowndreambox opendreambox Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 21.84%Jun 13, 2019
- Unknownyuzopro yuzo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 4.48%May 9, 2019
- High7.2Ivanti Pulse Connect Secure and Policy Secure Command Injection VulnerabilityPatch nowKEVEPSS 98.54%Apr 25, 2019
- High8.8Atlassian Confluence Server and Data Center Path Traversal VulnerabilityPatch nowKEVEPSS 97.03%Apr 18, 2019
- Unknownyellowpencil visual_css_style_editor Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 1.89%Apr 11, 2019
- High7.2Reolink Multiple IP Cameras OS Command Injection VulnerabilityPatch nowKEVEPSS 37.54%Apr 8, 2019
- Medium6.1WordPress Social Warfare Plugin Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 72.95%Mar 24, 2019
- UnknownAbandoned Cart Lite for WooCommerce and Abandoned Cart Pro for WooCommerce plugins for WordPress Stored XSSPatch nowKEVEPSS 1.35%Mar 11, 2019
- Unknownasustor adm Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 44.33%Feb 21, 2019
- Unknownxiongmaitech mbd6304t Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.30%Feb 20, 2019
- Critical9.8Kaseya VSA SQL Injection VulnerabilityPatch nowKEVEPSS 86.82%Feb 4, 2019
- High7.2Cisco Small Business Routers Improper Input Validation VulnerabilityPatch nowKEVEPSS 95.92%Jan 24, 2019
- Critical9.8Paessler PRTG Network Monitor Local File Inclusion VulnerabilityPatch nowKEVEPSS 97.94%Nov 21, 2018
- Critical9.3vestacp control_panel Embedded Malicious CodePatch nowKEVEPSS 0.44%Sep 25, 2018
- High7.2WordPress wordpress Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 15.17%Aug 10, 2018
- UnknownASUS rt-ac53_firmware Improper AuthenticationPatch nowKEVEPSS 7.55%Jul 13, 2018
- High7.2Apache CouchDB Improper Input ValidationPatch nowKEVEPSS 12.16%Jul 11, 2018
- High7.2Paessler PRTG Network Monitor OS Command Injection VulnerabilityPatch nowKEVEPSS 87.00%Jul 2, 2018
- High7.2Nagios Nagios XI Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 42.05%May 16, 2018
Sort