Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCtek SkyRouter 4200 and 4300 apps/a3/cfg_ethping.cgi Arbitrary Command ExecutionPatch nowKEVEPSS 65.72%Dec 1, 2020
- UnknownNagios nagios Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 83.45%Dec 1, 2020
- Unknowntelartis_bv awstats_totals Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 53.20%Dec 1, 2020
- Unknownawstats awstats Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 58.36%Dec 1, 2020
- UnknownBarracuda Networks barracuda_spam_firewall Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 8.77%Dec 1, 2020
- UnknownBarracuda Networks barracuda_spam_firewall Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 53.37%Dec 1, 2020
- Unknownawstats awstats Improper Input ValidationPatch nowKEVEPSS 74.94%Dec 1, 2020
- UnknownApple darwin_streaming_server Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 68.86%Dec 1, 2020
- UnknownHCSEC-2020-23 - Nomad File Sandbox Escape via Container Volume MountCheck if you run itEPSS 1.65%Nov 25, 2020
- UnknownHCSEC-2020-21 - Nomad File Sandbox Escape via Template and Artifact StanzasCheck if you run itEPSS 1.49%Nov 25, 2020
- Critical9.1Multiple VMware Products Command Injection VulnerabilityPatch nowKEVEPSS 17.30%Nov 23, 2020
- Unknownstd42 elfinder Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 96.73%Nov 22, 2020
- Unknownyeager yeager_cms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 8.44%Nov 22, 2020
- Unknownmagmi_project magmi Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 38.46%Nov 22, 2020
- High8.8Drupal core Un-restricted Upload of FilePatch nowKEVEPSS 36.17%Nov 20, 2020
- High7.8PEAR Archive_Tar Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 84.55%Nov 19, 2020
- UnknownStored XSS in markdown file with Nextcloud Talk using Internet ExplorerCheck if you run itEPSS 0.90%Nov 18, 2020
- UnknownPotential DDoS when posting long data into workflow validation rulesCheck if you run itEPSS 1.58%Nov 18, 2020
- Medium5.5Qualcomm Multiple Chipsets Detection of Error Condition Without Action VulnerabilityPatch nowKEVEPSS 0.52%Nov 17, 2020
- High7.8Qualcomm Multiple Chipsets Use-After-Free VulnerabilityPatch nowKEVEPSS 1.54%Nov 17, 2020
- Critical9.8Apache Airflow's Experimental API Authentication BypassPatch nowKEVEPSS 99.78%Nov 10, 2020
- UnknownUltimate Member ultimate_member Improper Privilege ManagementPatch nowKEVEPSS 8.46%Nov 9, 2020
- High8.8Google Chromium V8 Incorrect Implementation VulnerabililtyPatch nowKEVEPSS 2.76%Nov 9, 2020
- Critical9.6Google Chrome Use-After-Free VulnerabilityPatch nowKEVEPSS 2.73%Nov 7, 2020
- High7.5MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encod…Check if you run itEPSS 4.42%Nov 6, 2020
Sort