Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1Cisco ASA and FTD Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 85.58%Oct 21, 2020
- High7.2Oracle WebLogic Server Unspecified VulnerabilityPatch nowKEVEPSS 97.73%Oct 21, 2020
- Critical9.8Oracle WebLogic Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Oct 21, 2020
- High7.5Oracle Business Intelligence Enterprise Edition Path TransversalPatch nowKEVEPSS 97.23%Oct 21, 2020
- UnknownXSS through image upload of contacts using svg fileCheck if you run itEPSS 0.63%Oct 20, 2020
- UnknownXSS through image upload on contacts using svg file with png extensionCheck if you run itEPSS 0.64%Oct 20, 2020
- Critical9.8VMware ESXi OpenSLP Use-After-Free VulnerabilityPatch nowKEVEPSS 83.02%Oct 20, 2020
- UnknownWindows NTLM TamperingPatch nowKEVEPSS 48.04%Oct 20, 2020
- Critical9.6Google Chrome FreeType Heap Buffer Overflow VulnerabilityPatch nowKEVEPSS 63.89%Oct 19, 2020
- Medium5.5Apple iOS, iPadOS, and macOS Input Validation VulnerabilityPatch nowKEVEPSS 3.21%Oct 16, 2020
- High7.8Apple Multiple Products Memory Corruption VulnerabilityPatch nowKEVEPSS 3.20%Oct 16, 2020
- Unknowntemplateinvaders ti_woocommerce_wishlist Missing AuthorizationPatch nowKEVEPSS 1.14%Oct 16, 2020
- UnknownSocial App does not validate server certificates for outgoing connectionsCheck if you run itEPSS 0.65%Oct 15, 2020
- UnknownImproper access control to messages of Social appCheck if you run itEPSS 1.02%Oct 15, 2020
- UnknownMicrosoft Internet Explorer Out-of-bounds WritePatch nowKEVEPSS 30.35%Oct 15, 2020
- UnknownAdobe acrobat_dc Out-of-bounds WritePatch nowKEVEPSS 7.51%Oct 15, 2020
- Unknownnetwork-weathermap .network_weathermap Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 4.68%Oct 15, 2020
- UnknownOptergy Proton/Enterprise Remote Root Code ExecutionPatch nowKEVEPSS 93.38%Oct 14, 2020
- UnknownGrandstream gac2500_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 15.47%Oct 14, 2020
- Unknownopenmrs openmrs Deserialization of Untrusted DataPatch nowKEVEPSS 98.71%Oct 14, 2020
- Unknownmi miwifi_os Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 23.96%Oct 14, 2020
- UnknownZope 2.12.x and 2.13.x Remote Code ExecutionPatch nowKEVEPSS 78.08%Oct 14, 2020
- Critical9.8SonicWall SonicOS Buffer Overflow VulnerabilityPatch nowKEVEPSS 26.87%Oct 12, 2020
- Unknownnette application Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 34.42%Oct 12, 2020
- Unknowngoodlayers good_learning_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 9.76%Oct 10, 2020
Sort