Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownGFI KerioControl HTTP Response Splitting VulnerabilityPatch nowKEVEPSS 29.56%Jan 8, 2025
- Critical9.8Cleo Multiple Products Unauthenticated File Upload VulnerabilityPatch nowKEVEPSS 93.97%Dec 10, 2024
- High8.8Apple Multiple Products Code Execution VulnerabilityPatch nowKEVEPSS 9.85%Nov 19, 2024
- UnknownGradio move_resource_to_block_cache() Method VulnerabilityPatch nowKEVEPSS 9.31%Sep 18, 2024
- High7.5Apache OFBiz Forced Browsing VulnerabilityPatch nowKEVEPSS 99.98%Sep 4, 2024
- UnknownOllama Model Path Remote Code Execution VulnerabilityPatch nowKEVEPSS 89.63%Aug 22, 2024
- UnknownApache OFBiz Improper Restricted Pathname Limitation VulnerabilityPatch nowKEVEPSS 87.88%Aug 19, 2024
- High7.5Microsoft Windows Scripting Engine Memory Corruption VulnerabilityPatch nowKEVEPSS 41.38%Aug 13, 2024
- UnknownZyxel NAS setCookie Crafted HTTP POST VulnerabilityPatch nowKEVEPSS 86.20%Jun 24, 2024
- Critical9.8Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) VulnerabilityPatch nowKEVEPSS 99.99%Jun 13, 2024
- Critical9.8Apache OFBiz Path Traversal VulnerabilityPatch nowKEVEPSS 99.92%May 8, 2024
- UnknownOpenSSL OpenSSL Inadequate Encryption StrengthPatch nowKEVEPSS 95.33%May 6, 2024
- Critical10.0Palo Alto Networks PAN-OS Command Injection VulnerabilityPatch nowKEVEPSS 100.00%Apr 12, 2024
- UnknownHCSEC-2024-06 - HashiCorp Response to XZ Utils Supply Chain Attack (CVE-2024-3094)Check this weekEPSS 90.90%Apr 2, 2024
- Unknownanyscale ray Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 83.94%Mar 26, 2024
- Critical9.8Microsoft Outlook Improper Input Validation VulnerabilityPatch nowKEVEPSS 94.66%Feb 13, 2024
- High8.1Microsoft Windows Internet Shortcut Files Security Feature Bypass VulnerabilityPatch nowKEVEPSS 99.41%Feb 13, 2024
- High7.8Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control VulnerabilityPatch nowKEVEPSS 59.81%Feb 13, 2024
- Critical9.8Jenkins Command Line Interface (CLI) Path Traversal VulnerabilityPatch nowKEVEPSS 100.00%Jan 24, 2024
- UnknownAtlassian Jira Server and Data Center Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 94.45%Dec 6, 2023
- Critical9.8Apache ActiveMQ Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.99%Oct 27, 2023
- Critical9.8F5 BIG-IP Configuration Utility Authentication Bypass VulnerabilityPatch nowKEVEPSS 96.71%Oct 26, 2023
- Critical9.8JetBrains TeamCity Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.99%Sep 19, 2023
- High7.8Microsoft Streaming Service Proxy Privilege Escalation VulnerabilityPatch nowKEVEPSS 27.91%Sep 12, 2023
- High8.8Google Chromium WebP Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.98%Sep 6, 2023
Sort