Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownsearchblox searchblox Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 13.98%Nov 13, 2023
- Unknownagentejo cockpit Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 50.26%Nov 13, 2023
- Unknowndedecms dedecms Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 74.12%Nov 13, 2023
- UnknownElastic Kibana External Control of File Name or PathPatch nowKEVEPSS 82.25%Nov 13, 2023
- Critical9.8F5 BIG-IP Configuration Utility Authentication Bypass VulnerabilityPatch nowKEVEPSS 96.52%Oct 26, 2023
- Critical9.8NextGen Healthcare Mirth Connect Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 82.71%Oct 26, 2023
- High7.5North Grid Proself Improper Restriction of XML External Entity (XXE) Reference VulnerabilityPatch nowKEVEPSS 4.82%Oct 18, 2023
- UnknownWeaver e-cology Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.18%Oct 14, 2023
- High7.5HTTP/2 Rapid Reset Attack VulnerabilityPatch nowKEVEPSS 100.00%Oct 10, 2023
- Critical9.8Cross-Site Request Forgery vulnerability, whose exploitation could allow an attacker to perform different actions on the platform as an administrator, simply by changi…Check if you run itEPSS 0.44%Oct 2, 2023
- High8.7Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 0.52%Sep 6, 2023
- Critical10.0D-Link dir-110_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 10.13%Sep 6, 2023
- Medium6.5Qlik Sense Path Traversal VulnerabilityPatch nowKEVEPSS 84.84%Aug 29, 2023
- Critical9.9Qlik Sense HTTP Tunneling VulnerabilityPatch nowKEVEPSS 88.22%Aug 29, 2023
- Medium5.3Juniper Junos OS SRX Series Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 1.12%Aug 29, 2023
- Medium5.3Juniper Junos OS EX Series Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 83.45%Aug 17, 2023
- Medium5.3Juniper Junos OS SRX Series Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 93.47%Aug 17, 2023
- Critical9.8Juniper Junos OS EX Series and SRX Series PHP External Variable Modification VulnerabilityPatch nowKEVEPSS 95.07%Aug 17, 2023
- Medium5.3Juniper Junos OS EX Series PHP External Variable Modification VulnerabilityPatch nowKEVEPSS 89.96%Aug 17, 2023
- UnknownWordPress requests Deserialization of Untrusted DataPatch nowKEVEPSS 2.14%Aug 14, 2023
- Unknowncreatio crm_creatio Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.97%Aug 8, 2023
- Unknown1byte copy9 Improper Access ControlPatch nowKEVEPSS 2.51%Jul 27, 2023
- UnknownApache Shiro Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.07%Jul 26, 2023
- Critical9.8Weaver e-cology Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.49%Jul 20, 2023
- Unknownautomattic woocommerce_payments Improper AuthenticationPatch nowKEVEPSS 87.04%Jul 17, 2023
Sort