Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownaccesspressthemes access_demo_importer Improper AuthorizationPatch nowKEVEPSS 1.71%Nov 28, 2021
- Critical9.1hancom anysign4pc Path Traversal: '../filedir'Patch nowKEVEPSS 1.30%Nov 22, 2021
- Critical9.8Roundcube Webmail SQL Injection VulnerabilityPatch nowKEVEPSS 69.88%Nov 18, 2021
- High7.5Metabase GeoJSON API Local File Inclusion VulnerabilityPatch nowKEVEPSS 97.18%Nov 17, 2021
- Unknownwpwax directorist Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.84%Nov 16, 2021
- High7.5GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segme…Check if you run itEPSS 4.46%Nov 15, 2021
- Unknownwebnus modern_events_calendar_lite Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 72.80%Nov 15, 2021
- Unknowngpononu 1ge_router_wifi_onu_v2801rw_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 45.72%Nov 11, 2021
- UnknownTOTOLINK a3002ru Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 25.14%Nov 11, 2021
- High8.3Linksys x3000 firmware ping_ip command injectionPatch nowKEVEPSS 63.11%Nov 11, 2021
- High7.5Microsoft Active Directory Domain Services Privilege Escalation VulnerabilityPatch nowKEVEPSS 77.17%Nov 9, 2021
- High7.5Microsoft Active Directory Domain Services Privilege Escalation VulnerabilityPatch nowKEVEPSS 73.30%Nov 9, 2021
- Medium5.5Microsoft Windows Installer Privilege Escalation VulnerabilityPatch nowKEVEPSS 19.45%Nov 9, 2021
- High8.8Microsoft Exchange Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 91.74%Nov 9, 2021
- High7.8Microsoft Excel Security Feature BypassPatch nowKEVEPSS 43.00%Nov 9, 2021
- Unknownroundupwp registrations_for_the_events_calendar Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 7.30%Nov 8, 2021
- High7.8Android Kernel Use-After-Free VulnerabilityPatch nowKEVEPSS 1.06%Nov 6, 2021
- Critical9.8Sitecore XP Remote Command Execution VulnerabilityPatch nowKEVEPSS 97.57%Nov 5, 2021
- Medium6.4Android Kernel Race Condition VulnerabilityPatch nowKEVEPSS 0.87%Nov 5, 2021
- High7.5In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit a spurious '\0' character via crafted ISO-2022-JP-3 data…Check if you run itEPSS 3.29%Nov 4, 2021
- Unknownlegalweb wp_dsgvo_tools Improper Access ControlPatch nowKEVEPSS 4.59%Nov 2, 2021
- UnknownWPExperts mycred Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.36%Nov 1, 2021
- UnknownA untrusted search path issue was found in Calibre at devices/linux_mount_helper.c leading to the ability of unprivileged users to execute any program as root.Check if you run itEPSS 2.31%Oct 27, 2021
- Unknownoptinmonster optinmonster Improper AuthorizationPatch nowKEVEPSS 21.93%Oct 27, 2021
- Unknownroundupwp registrations_for_the_events_calendar Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.44%Oct 27, 2021
Sort