Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Microsoft Active Directory Domain Services Privilege Escalation VulnerabilityPatch nowKEVEPSS 73.30%Nov 9, 2021
- Medium5.5Microsoft Windows Installer Privilege Escalation VulnerabilityPatch nowKEVEPSS 19.45%Nov 9, 2021
- High8.8Microsoft Exchange Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 91.74%Nov 9, 2021
- High7.8Microsoft Excel Security Feature BypassPatch nowKEVEPSS 43.00%Nov 9, 2021
- Unknownroundupwp registrations_for_the_events_calendar Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 7.30%Nov 8, 2021
- High7.8Android Kernel Use-After-Free VulnerabilityPatch nowKEVEPSS 1.06%Nov 6, 2021
- Critical9.8Sitecore XP Remote Command Execution VulnerabilityPatch nowKEVEPSS 97.57%Nov 5, 2021
- Medium6.4Android Kernel Race Condition VulnerabilityPatch nowKEVEPSS 0.87%Nov 5, 2021
- High7.5In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit a spurious '\0' character via crafted ISO-2022-JP-3 data…Check if you run itEPSS 3.29%Nov 4, 2021
- Unknownlegalweb wp_dsgvo_tools Improper Access ControlPatch nowKEVEPSS 3.84%Nov 2, 2021
- UnknownWPExperts mycred Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.36%Nov 1, 2021
- UnknownA untrusted search path issue was found in Calibre at devices/linux_mount_helper.c leading to the ability of unprivileged users to execute any program as root.Check if you run itEPSS 2.31%Oct 27, 2021
- Unknownoptinmonster optinmonster Improper AuthorizationPatch nowKEVEPSS 21.93%Oct 27, 2021
- Unknownroundupwp registrations_for_the_events_calendar Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.44%Oct 27, 2021
- High8.8Google Chromium V8 Memory Corruption VulnerabilityPatch nowKEVEPSS 38.57%Oct 26, 2021
- Unknownunidocs ezpdfreader Improper Input ValidationPatch nowKEVEPSS 1.05%Oct 26, 2021
- Critical9.8BQE BillQuick Web Suite SQL Injection VulnerabilityPatch nowKEVEPSS 74.43%Oct 22, 2021
- Unknownasylumdigital age_gate Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.80%Oct 21, 2021
- Medium4.3CVE-2021-35558 is listed by Vulnerability in the Core RDBMS component of Oracle Database Server..Check if you run itEPSS 0.83%Oct 20, 2021
- Medium4.3CVE-2021-35557 is listed by Vulnerability in the Core RDBMS component of Oracle Database Server..Check if you run itEPSS 0.84%Oct 20, 2021
- Medium5.5CVE-2021-35551 is listed by Vulnerability in the RDBMS Security component of Oracle Database Server..Check if you run itEPSS 0.79%Oct 20, 2021
- Unknownimagestowebp_project images_to_webp Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 5.88%Oct 19, 2021
- High7.5Draytek VigorConnect Path Traversal VulnerabilityPatch nowKEVEPSS 95.92%Oct 13, 2021
- High7.5Draytek VigorConnect Path Traversal VulnerabilityPatch nowKEVEPSS 89.65%Oct 13, 2021
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 1.58%Oct 12, 2021
Sort