Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Advantive VeraCore Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 32.28%Feb 3, 2025
- UnknownWSO2 User Registration Arbitrary Account CreationPatch nowKEVEPSS 0.66%Feb 2, 2025
- Unknownabb aspect-ent-12_firmware Improper Validation of Specified Type of InputPatch nowKEVEPSS 19.01%Feb 2, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: always recalculate features after XDP clearing, fix null-deref Recalculate features when…Check if you run itEPSS 0.23%Jan 31, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: fec: handle page_pool_dev_alloc_pages error The fec_enet_update_cbd function calls page_pool_d…Check if you run itEPSS 0.45%Jan 31, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mac802154: check local interfaces before deleting sdata list syzkaller reported a corrupted list in…Check if you run itEPSS 0.24%Jan 31, 2025
- UnknownLiferay digital_experience_platform URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 0.97%Jan 29, 2025
- Medium6.6A vulnerability was found in CRI-O.Check if you run itEPSS 0.27%Jan 28, 2025
- High8.8Zyxel DSL CPE OS Command Injection VulnerabilityPatch nowKEVEPSS 22.89%Jan 28, 2025
- High8.8Zyxel DSL CPE OS Command Injection VulnerabilityPatch nowKEVEPSS 20.70%Jan 28, 2025
- UnknownSolarWinds dameware_mini_remote_control Origin Validation ErrorPatch nowKEVEPSS 5.18%Jan 28, 2025
- Medium4.3Apple Safari/iOS/iPadOS/visionOS/watchOS and macOS Sequoia Interface Spoofing VulnerabilityPatch nowKEVEPSS 0.80%Jan 27, 2025
- Critical10.0Apple Multiple Products Use-After-Free VulnerabilityPatch nowKEVEPSS 17.51%Jan 27, 2025
- UnknownWordPress Oshine Modules Plugin Server Side Request Forgery (SSRF)Patch nowKEVEPSS 0.26%Jan 27, 2025
- High7.07-Zip Mark of the Web Bypass VulnerabilityPatch nowKEVEPSS 67.07%Jan 24, 2025
- UnknownVeeam Service Provider Console Remote Code Execution VulnerabilityPatch nowKEVEPSS 20.36%Jan 23, 2025
- Critical9.8SonicWall SMA1000 Appliances Deserialization VulnerabilityPatch nowKEVEPSS 23.43%Jan 22, 2025
- Unknownpayplus payplus_payment_gateway Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.13%Jan 22, 2025
- UnknownCyberPower PowerPanel Enterprise 'query_ptask_verbose' SQL Injection VulnerabilityPatch nowKEVEPSS 5.41%Jan 22, 2025
- UnknownCyberPower PowerPanel Enterprise 'query_ptask_lean' SQL Injection VulnerabilityPatch nowKEVEPSS 4.55%Jan 22, 2025
- UnknownCyberPower PowerPanel Enterprise 'query_contract_result' SQL Injection VulnerabilityPatch nowKEVEPSS 5.41%Jan 22, 2025
- UnknownCyberPower PowerPanel Enterprise 'query_utask_verbose' SQL Injection VulnerabilityPatch nowKEVEPSS 5.41%Jan 22, 2025
- UnknownCyberPower PowerPanel Enterprise PDNU REST API Unauthenticated VulnerabilityPatch nowKEVEPSS 6.77%Jan 22, 2025
- Unknownafterlogic aurora Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 16.90%Jan 22, 2025
- Unknownlansweeper lansweeper Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 11.31%Jan 22, 2025
Sort