Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Apache CouchDB Insecure Default Initialization of Resource VulnerabilityPatch nowKEVEPSS 92.51%Mar 6, 2022
- Critical9.6Mozilla Firefox Use-After-Free VulnerabilityPatch nowKEVEPSS 2.36%Mar 5, 2022
- High8.8Mozilla Firefox Use-After-Free VulnerabilityPatch nowKEVEPSS 14.26%Mar 5, 2022
- High7.5A flaw was found in python.Check this weekEPSS 13.17%Mar 4, 2022
- Critical9.8WatchGuard Firebox and XTM Appliances Arbitrary Code ExecutionPatch nowKEVEPSS 78.16%Mar 4, 2022
- Critical10.0VMware Spring Cloud Gateway Code Injection VulnerabilityPatch nowKEVEPSS 98.25%Mar 3, 2022
- High7.8Linux Kernel Improper Authentication VulnerabilityPatch nowKEVEPSS 5.53%Mar 3, 2022
- UnknownCVE-2022-23606 is listed by HCSEC-2022-07 - Consul’s Connect Service Mesh Affected By Recent Envoy Security Releases.Check if you run itEPSS 1.02%Mar 1, 2022
- UnknownCVE-2022-21657 is listed by HCSEC-2022-07 - Consul’s Connect Service Mesh Affected By Recent Envoy Security Releases.Check if you run itEPSS 0.52%Mar 1, 2022
- UnknownCVE-2022-21655 is listed by HCSEC-2022-07 - Consul’s Connect Service Mesh Affected By Recent Envoy Security Releases.Check if you run itEPSS 1.15%Mar 1, 2022
- UnknownCVE-2022-21654 is listed by HCSEC-2022-07 - Consul’s Connect Service Mesh Affected By Recent Envoy Security Releases.Check if you run itEPSS 1.08%Mar 1, 2022
- UnknownCVE-2021-43826 is listed by HCSEC-2022-07 - Consul’s Connect Service Mesh Affected By Recent Envoy Security Releases.Check if you run itEPSS 1.06%Mar 1, 2022
- UnknownCVE-2021-43825 is listed by HCSEC-2022-07 - Consul’s Connect Service Mesh Affected By Recent Envoy Security Releases.Check if you run itEPSS 0.88%Mar 1, 2022
- UnknownCVE-2021-43824 is listed by HCSEC-2022-07 - Consul’s Connect Service Mesh Affected By Recent Envoy Security Releases.Check if you run itEPSS 1.06%Mar 1, 2022
- Critical9.8templateinvaders ti_woocommerce_wishlist Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 74.00%Feb 28, 2022
- High7.5valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.Check if you run itEPSS 5.12%Feb 26, 2022
- High8.8In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.Check if you run itEPSS 4.12%Feb 24, 2022
- High8.8WatchGuard Firebox and XTM Privilege Escalation VulnerabilityPatch nowKEVEPSS 10.80%Feb 24, 2022
- UnknownMicrosoft SQL Server Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 6.69%Feb 24, 2022
- Unknownapache2 CVE-2020-11984Patch nowKEVEPSS 90.04%Feb 22, 2022
- Unknownapache2 CVE-2019-10098Patch nowKEVEPSS 73.98%Feb 22, 2022
- Unknownapache2 CVE-2019-10097Patch nowKEVEPSS 52.87%Feb 22, 2022
- Unknownapache2 CVE-2019-0190Patch nowKEVEPSS 59.05%Feb 22, 2022
- Unknownapache2 CVE-2018-8011Patch nowKEVEPSS 55.61%Feb 22, 2022
- Unknownapache2 CVE-2018-1303Patch nowKEVEPSS 69.80%Feb 22, 2022
Sort