Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited onlyCheckedFix range storedEPSS

High7.2Command Injection in lodashVuln · CVE-2021-23337 · lodash · lodash · CVE.org · FIRST EPSS · GitHub Advisory Database · npm, RubyGemsPatch nowKEVEPSS 21.33%May 6, 2021
Critical9.8ASUS Routers Improper Authentication VulnerabilityVuln · CVE-2021-32030 · ASUS · Routers · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 99.39%May 6, 2021
Critical9.8Cisco HyperFlex HX Data Platform Command Injection VulnerabilityVuln · CVE-2021-1498 · Cisco · HyperFlex HX · CISA KEV · CVE.org · FIRST EPSS · CiscoPatch nowKEVEPSS 100.00%May 6, 2021
Critical9.8Cisco HyperFlex HX Installer Virtual Machine Command Injection VulnerabilityVuln · CVE-2021-1497 · Cisco · HyperFlex HX · CISA KEV · CVE.org · FIRST EPSS · CiscoPatch nowKEVEPSS 99.93%May 6, 2021
High7.8Dell dbutil Driver Insufficient Access Control VulnerabilityVuln · CVE-2021-21551 · Dell · dbutil Driver · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 79.63%May 4, 2021
High8.8Apple iOS WebKit Buffer Overflow VulnerabilityVuln · CVE-2021-30666 · Apple · iOS · CISA KEV · CVE.org · FIRST EPSS · Apple, iOSPatch nowKEVEPSS 3.00%May 3, 2021
High8.8Apple Multiple Products WebKit Memory Corruption VulnerabilityVuln · CVE-2021-30665 · Apple · Multiple Products · CISA KEV · CVE.org · FIRST EPSS · Apple, iOSPatch nowKEVEPSS 3.71%May 3, 2021
High8.8Apple Multiple Products WebKit Integer Overflow VulnerabilityVuln · CVE-2021-30663 · Apple · Multiple Products · CISA KEV · CVE.org · FIRST EPSS · Apple, SafariPatch nowKEVEPSS 3.52%May 3, 2021
High8.8Arm Mali Graphics Processing Unit (GPU) Unspecified VulnerabilityVuln · CVE-2021-28664 · Arm · Mali Graphics Processing Unit (GPU) · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 5.41%May 3, 2021
High8.8Arm Mali Graphics Processing Unit (GPU) Use-After-Free VulnerabilityVuln · CVE-2021-28663 · Arm · Mali Graphics Processing Unit (GPU) · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 12.08%May 3, 2021
Unknowncleantalk spam_protection\,_antispam\,_firewall Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Vuln · CVE-2021-24295 · cleantalk · spam_protection\,_antispam\,_firewall · CVE.org · FIRST EPSS · VulnCheck KEV · WordPressPatch nowKEVEPSS 4.69%May 3, 2021
UnknownIn several functions of NotificationManagerService.java and related files, there is a possible way to record audio from the background without notification to the user due to a perVuln · CVE-2019-2219 · CVE.org · FIRST EPSS · OpenSSF OSV / OSV Scanner · AndroidCheck if you run itEPSS 0.15%May 1, 2021
Critical9.8Arcadyan Buffalo Firmware Path Traversal VulnerabilityVuln · CVE-2021-20090 · Arcadyan · Buffalo Firmware · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 99.98%Apr 29, 2021
Critical9.8QNAP NAS Improper Authorization VulnerabilityVuln · CVE-2021-28799 · QNAP · QNAP Network-Attached Storage (NAS) · CISA KEV · CVE.org · FIRST EPSS · QNAPPatch nowKEVEPSS 78.25%Apr 29, 2021
Critical9.8Apache OFBiz Deserialization of Untrusted DataVuln · CVE-2021-30128 · apache · ofbiz · CVE.org · FIRST EPSS · NIST NVD · ApachePatch nowKEVEPSS 81.21%Apr 27, 2021
High8.8Google Chromium V8 Type Confusion VulnerabilityVuln · CVE-2021-21224 · Google · Chromium V8 · CISA KEV · CVE.org · FIRST EPSS · Chrome, GooglePatch nowKEVEPSS 84.17%Apr 26, 2021
High8.8Google Chromium V8 Improper Input Validation VulnerabilityVuln · CVE-2021-21220 · Google · Chromium V8 · CISA KEV · CVE.org · FIRST EPSS · Chrome, GooglePatch nowKEVEPSS 70.44%Apr 26, 2021
High8.8Apple Multiple Products WebKit Storage Use-After-Free VulnerabilityVuln · CVE-2021-30661 · Apple · Multiple Products · CISA KEV · CVE.org · FIRST EPSS · Apple, SafariPatch nowKEVEPSS 4.49%Apr 26, 2021
Medium5.5Apple macOS Unspecified VulnerabilityVuln · CVE-2021-30657 · Apple · MacOS X · CISA KEV · CVE.org · FIRST EPSS · Apple, macOSPatch nowKEVEPSS 68.53%Apr 26, 2021
Critical10.0GitLab Community and Enterprise Editions Remote Code Execution VulnerabilityVuln · CVE-2021-22205 · GitLab · Community and Enterprise Editions · CISA Cybersecurity Advisories · CISA KEV · CVE.org · GitLabPatch nowKEVEPSS 99.73%Apr 23, 2021
High7.8ExifTool Remote Code Execution VulnerabilityVuln · CVE-2021-22204 · Perl · Exiftool · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 99.98%Apr 23, 2021
Low2.7Vulnerability in the Oracle Database - Enterprise Edition Unified Audit component of Oracle Database Server.Vuln · CVE-2021-2245 · Oracle · database · CVE.org · FIRST EPSS · Oracle Critical Patch Updates · OracleCheck if you run itEPSS 0.71%Apr 22, 2021
Low2.3CVE-2021-2207 is listed by Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server..Vuln · CVE-2021-2207 · Oracle · database · CVE.org · FIRST EPSS · Oracle Critical Patch Updates · OracleCheck if you run itEPSS 0.60%Apr 22, 2021
Critical10.0Ivanti Pulse Connect Secure Use-After-Free VulnerabilityVuln · CVE-2021-22893 · Ivanti · Connect Secure and Policy Secure · CISA KEV · CVE.org · FIRST EPSS · IvantiPatch nowKEVEPSS 47.17%Apr 20, 2021
Medium4.9SonicWall Email Security Path Traversal VulnerabilityVuln · CVE-2021-20023 · SonicWall · SonicWall Email Security · CISA KEV · CVE.org · FIRST EPSS · SonicWallPatch nowKEVEPSS 51.69%Apr 20, 2021

Sort