Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknowncaddy_project caddy Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.03%Jan 26, 2022
- Unknownopensuse leap Missing AuthorizationPatch nowKEVEPSS 14.95%Jan 26, 2022
- UnknownWordPress wordpress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 10.20%Jan 26, 2022
- UnknownCPUID CPU-Z through 1.81 Kernel-Mode Driver Privilege EscalationPatch nowKEVEPSS 0.38%Jan 26, 2022
- UnknownWordPress wordpress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.71%Jan 26, 2022
- UnknownWordPress wordpress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 6.52%Jan 26, 2022
- UnknownIBM jazz_reporting_service Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.55%Jan 26, 2022
- Unknownubercart ubercart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.16%Jan 26, 2022
- Critical9.8Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.Check if you run itEPSS 5.08%Jan 24, 2022
- Unknownad_inserter_pro_project ad_inserter_pro Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.06%Jan 24, 2022
- Critical9.8Oracle Fusion Middleware Unspecified VulnerabilityPatch nowKEVEPSS 96.28%Jan 19, 2022
- UnknownMicrosoft Exchange Server Remote Code ExecutionPatch nowKEVEPSS 13.01%Jan 17, 2022
- Medium5.5GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c.Check if you run itEPSS 0.80%Jan 14, 2022
- Critical9.8NUUO NVRmini2 Devices Missing Authentication VulnerabilityPatch nowKEVEPSS 48.50%Jan 14, 2022
- Critical9.8The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without…Check if you run itEPSS 4.69%Jan 14, 2022
- Critical9.8The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without v…Check if you run itEPSS 5.26%Jan 14, 2022
- Medium5.3Zabbix Frontend Improper Access Control VulnerabilityPatch nowKEVEPSS 95.26%Jan 13, 2022
- Critical9.8Zabbix Frontend Authentication Bypass VulnerabilityPatch nowKEVEPSS 95.68%Jan 13, 2022
- Unknowncodemiq wordpress_email_template_designer Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 66.41%Jan 13, 2022
- Unknownsabberworm php_css_parser Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 49.80%Jan 12, 2022
- UnknownDrayTek vigor300b_firmware Out-of-bounds WritePatch nowKEVEPSS 20.88%Jan 12, 2022
- UnknownDrayTek vigor300b_firmware Out-of-bounds WritePatch nowKEVEPSS 20.88%Jan 12, 2022
- UnknownDrayTek vigor300b_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 39.39%Jan 12, 2022
- Unknownsibsoft xfilesharing Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 45.36%Jan 12, 2022
- UnknownTP-Link tl-r600vpn_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 53.30%Jan 12, 2022
Sort