Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.0DrayTek vigor3900_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.14%Nov 4, 2024
- High8.0DrayTek vigor3900_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.03%Nov 4, 2024
- High8.0DrayTek vigor3900_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.14%Nov 4, 2024
- High8.0DrayTek vigor3900_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.33%Nov 4, 2024
- High8.0DrayTek vigor3900_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.14%Nov 4, 2024
- High7.3Android Framework Privilege Escalation VulnerabilityPatch nowKEVEPSS 0.71%Nov 4, 2024
- UnknownSplunk splunk Path Traversal: '.../...//'Patch nowKEVEPSS 13.01%Nov 3, 2024
- UnknownSiSMART Dashboard Insecure Direct Object Reference (IDOR) Horizontal-Privilege Escalation VulnerabilityPatch nowKEVEPSS 0.70%Nov 2, 2024
- UnknownApple ipados Improper Link Resolution Before File Access ('Link Following')Patch nowKEVEPSS 0.75%Nov 2, 2024
- UnknownZyxel dx5401-b0_firmware Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 5.42%Nov 1, 2024
- UnknownZyxel ax7501-b0_firmware Improper Link Resolution Before File Access ('Link Following')Patch nowKEVEPSS 0.25%Nov 1, 2024
- UnknownIvanti Connect Secure and Policy Secure Out-of-bounds WritePatch nowKEVEPSS 18.99%Oct 30, 2024
- Unknownpostgresql postgresql_jdbc_driver Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.81%Oct 30, 2024
- UnknownAI Power: Complete AI Pack plugin for WordPress handle_image_upload Function Arbitrary File Upload VulnerabilityPatch nowKEVEPSS 14.98%Oct 30, 2024
- Unknownozette simple_mobile_url_redirect Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 1.61%Oct 30, 2024
- High8.7erudika scoold Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 1.03%Oct 29, 2024
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: blk-rq-qos: fix crash on rq_qos_wait vs.Check if you run itEPSS 0.22%Oct 29, 2024
- UnknownCyberPanel /filemanager/upload Remote Code Execution VulnerabilityPatch nowKEVEPSS 47.67%Oct 29, 2024
- Critical9.8CyberPanel Incorrect Default Permissions VulnerabilityPatch nowKEVEPSS 84.40%Oct 29, 2024
- UnknownApple icloud Improper AuthenticationPatch nowKEVEPSS 2.19%Oct 29, 2024
- UnknownApple ipados Improper Input ValidationPatch nowKEVEPSS 2.00%Oct 29, 2024
- Medium5.3Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect')Check if you run itEPSS 0.27%Oct 28, 2024
- High8.0DrayTek vigor2960_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 0.67%Oct 28, 2024
- Critical9.8Cleo Multiple Products Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 98.61%Oct 27, 2024
- Medium5.9An issue was discovered in libexpat before 2.6.4.Check if you run itEPSS 1.12%Oct 27, 2024
Sort