Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownHP Universal CMDB 10.01 and 10.10 Unknown Vector Remote Code Execution VulnerabilityPatch nowKEVEPSS 12.23%Apr 12, 2021
- UnknownD-Link DIR-645 Router Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 27.75%Apr 12, 2021
- UnknownD-Link dcs-3411_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 40.35%Apr 12, 2021
- High7.2SonicWall Email Security Unrestricted Upload of File VulnerabilityPatch nowKEVEPSS 16.64%Apr 9, 2021
- Critical9.8SonicWall Email Security Improper Privilege Management VulnerabilityPatch nowKEVEPSS 88.78%Apr 9, 2021
- Unknownsupervisord supervisor Incorrect Default PermissionsPatch nowKEVEPSS 87.55%Apr 8, 2021
- High8.8Google Chromium Blink Use-After-Free VulnerabilityPatch nowKEVEPSS 9.31%Apr 7, 2021
- Medium4.9ASUS asmb9-ikvm_firmware Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 1.81%Apr 6, 2021
- High8.1A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result in the Elliptic Curve Crypt…Check if you run itEPSS 1.74%Apr 5, 2021
- High8.8Apple Multiple Products Type Confusion VulnerabilityPatch nowKEVEPSS 13.98%Apr 2, 2021
- Unknownaivahthemes business_hours_pro Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.04%Apr 2, 2021
- Low3.7curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets.Check if you run itEPSS 3.06%Apr 1, 2021
- Medium5.3curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header.Check if you run itEPSS 5.30%Apr 1, 2021
- Critical9.8F5 BIG-IP Traffic Management Microkernel Buffer OverflowPatch nowKEVEPSS 61.06%Mar 31, 2021
- High7.5VMware Server Side Request Forgery in vRealize Operations Manager APIPatch nowKEVEPSS 78.00%Mar 31, 2021
- Critical9.8F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.90%Mar 31, 2021
- Low3.3A flaw was found in the src/list.c of tar 1.33 and earlier.Check if you run itEPSS 1.09%Mar 26, 2021
- High7.5Micro Focus Access Manager Information Leakage VulnerabilityPatch nowKEVEPSS 25.70%Mar 26, 2021
- Medium6.1Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 7.08%Mar 26, 2021
- Unknownthrivethemes focusblog Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.95%Mar 24, 2021
- Unknownthrivethemes focusblog Improper Access ControlPatch nowKEVEPSS 2.06%Mar 24, 2021
- Medium5.5A flaw was found in SQLite's SELECT query functionality (src/select.c).Check if you run itEPSS 0.65%Mar 23, 2021
- UnknownWooCommerce help_scout Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 7.91%Mar 21, 2021
- High7.5Grafana Snapshot Feature Remote API Denial of ServicePatch nowKEVEPSS 83.04%Mar 18, 2021
- Unknownelementor Website Builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.75%Mar 17, 2021
Sort