Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 24.61%Aug 12, 2024
- High7.2TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 1.79%Aug 12, 2024
- Critical9.8Samsung MagicINFO 9 Server Path Traversal VulnerabilityPatch nowKEVEPSS 91.94%Aug 12, 2024
- UnknownDeserialization of Untrusted DataPatch nowKEVEPSS 0.44%Aug 12, 2024
- UnknownMultiples vulnérabilités dans Roundcube (09 août 2024)Check this weekEPSS 34.21%Aug 9, 2024
- UnknownLiquid Web GiveWP Object Injection VulnerabilityPatch nowKEVEPSS 0.56%Aug 9, 2024
- UnknownTOTOLINK a3700r_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 64.94%Aug 9, 2024
- UnknownElementsKit Elementor addons plugin for WordPress ekit_widgetarea_content Function VulnerabilityPatch nowKEVEPSS 0.40%Aug 8, 2024
- UnknownWoffice Theme Privilege EscalationPatch nowKEVEPSS 0.62%Aug 7, 2024
- UnknownTOTOlink A3700R setTracerouteCfg VulnerabilityPatch nowKEVEPSS 1.67%Aug 7, 2024
- UnknownMicrosoft windows_xp Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 21.97%Aug 7, 2024
- Critical9.8Ivanti Virtual Traffic Manager Authentication Bypass VulnerabilityPatch nowKEVEPSS 100.00%Aug 6, 2024
- UnknownCacti cmd_realtime.php Command Injection VulnerabilityPatch nowKEVEPSS 98.83%Aug 6, 2024
- UnknownD-Link dar-7000_firmware Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 30.51%Aug 6, 2024
- UnknownJEECG jimureport Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 11.59%Aug 6, 2024
- Unknownapollotheme ap_pagebuilder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 13.65%Aug 6, 2024
- Critical9.3RoundCube Webmail Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 82.88%Aug 5, 2024
- Critical9.8Apache OFBiz Incorrect Authorization VulnerabilityPatch nowKEVEPSS 99.43%Aug 5, 2024
- Unknownawesomemotive easy_digital_downloads Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.59%Aug 1, 2024
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.27%Aug 1, 2024
- Unknownkofimokome message_filter_for_contact_form_7 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.27%Aug 1, 2024
- Unknownkunalnagar custom_404_pro Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.62%Aug 1, 2024
- Medium6.5libcurl's ASN1 parser code has the function, used for parsing an ASN.1 Generalized Time field.Check this weekEPSS 20.22%Jul 31, 2024
- High7.0In the Linux kernel, the following vulnerability has been resolved: gve: Account for stopped queues when reading NIC stats We now account for the fact that the NIC mig…Check if you run itEPSS 0.31%Jul 30, 2024
- Low1.9In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of protected- and secure-keys Although the clear-key of neither protected- n…Check if you run itEPSS 0.26%Jul 30, 2024
Sort