Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5FlowiseAI Flowise Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 1.78%Jul 1, 2024
- Critical9.1Apache HTTP Server Improper Escaping of Output VulnerabilityPatch nowKEVEPSS 99.96%Jul 1, 2024
- Critical9.8OSGeo GeoServer GeoTools Eval Injection VulnerabilityPatch nowKEVEPSS 99.81%Jul 1, 2024
- High8.1A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).Patch nowKEVEPSS 99.51%Jul 1, 2024
- Unknownpixelite events_manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.31%Jul 1, 2024
- Unknownxtendify woffice Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.33%Jul 1, 2024
- Medium6.7Cisco NX-OS Command Injection VulnerabilityPatch nowKEVEPSS 4.31%Jul 1, 2024
- UnknownZoho ManageEngine ADManager Plus Authenticated VulnerabilityPatch nowKEVEPSS 11.13%Jul 1, 2024
- UnknownQuest kace_systems_management Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 9.55%Jun 29, 2024
- Unknownmailster mailster Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.27%Jun 28, 2024
- Unknownattribute_wizard_project attribute_wizard Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 12.33%Jun 28, 2024
- High7.5lollms lollms_web_ui Absolute Path TraversalPatch nowKEVEPSS 1.94%Jun 27, 2024
- Critical9.1Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer.Check if you run itEPSS 5.58%Jun 27, 2024
- Unknownemilia progress_planner Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.26%Jun 27, 2024
- UnknownWP Lab wp-lister_lite_for_amazon Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.62%Jun 27, 2024
- Unknownwpextended wp_extended Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.62%Jun 27, 2024
- Unknownnetis-systems mw5360_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 70.78%Jun 27, 2024
- UnknownXWiki xwiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 34.52%Jun 26, 2024
- Unknowncoffee_shop_pos_system_project coffee_shop_pos_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.64%Jun 26, 2024
- UnknownCrestron hd-md4x2-4k-e_firmware Improper AuthenticationPatch nowKEVEPSS 75.16%Jun 26, 2024
- High7.1In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors The error handling in nilfs_e…Check if you run itEPSS 0.25%Jun 25, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: smb: client: fix deadlock in smb2_find_smb_tcon() Unlock cifs_tcp_ses_lock before calling cifs_put_…Check if you run itEPSS 0.53%Jun 25, 2024
- Critical9.8Progress WhatsUp Gold Path Traversal VulnerabilityPatch nowKEVEPSS 99.29%Jun 25, 2024
- UnknownProgress MOVEit Transfer SFTP Module Authentication BypassPatch nowKEVEPSS 81.47%Jun 25, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winch_handlers before registering winch IRQ Registering a winch IRQ is racy, an in…Check if you run itEPSS 0.25%Jun 24, 2024
Sort