Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Cacti Command Injection VulnerabilityPatch nowKEVEPSS 99.83%Dec 5, 2022
- High7.5The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow.Check this weekEPSS 22.39%Nov 4, 2022
- High8.1curl before 7.86.0 has a double free.Check if you run itEPSS 2.93%Oct 29, 2022
- Unknowndreamsecurity magicline4nx.exe Improper Input ValidationPatch nowKEVEPSS 2.43%Oct 24, 2022
- UnknownJuniper Junos OS Improper Input ValidationPatch nowKEVEPSS 1.30%Oct 18, 2022
- Critical9.8Fortinet Multiple Products Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.98%Oct 10, 2022
- High8.8Microsoft Exchange Server Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 99.96%Sep 29, 2022
- Lowpersonnummer/dart vulnerable to Improper Input ValidationCheck if you run itEPSS 0.51%Sep 19, 2022
- Medium5.5A flaw was found in the Linux kernel.Check if you run itEPSS 0.27%Sep 9, 2022
- High8.8Atlassian Bitbucket Server and Data Center Command Injection VulnerabilityPatch nowKEVEPSS 99.08%Aug 24, 2022
- UnknownBeyondTrust appliance_base_software Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 25.99%Aug 19, 2022
- UnknownEclipse Jetty ConcatServlet VulnerabilityPatch nowKEVEPSS 78.48%Aug 19, 2022
- Unknowngetperfectsurvey perfect_survey Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 86.78%Aug 19, 2022
- UnknownLantronix premierwave_2050_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 36.94%Aug 19, 2022
- Critical9.8Atlassian Questions For Confluence App Hard-coded Credentials VulnerabilityPatch nowKEVEPSS 98.24%Jul 20, 2022
- Medium4.3A malicious server can serve excessive amounts of headers in a HTTP response to curl and curl < 7.84.0 stores all of them.Check this weekEPSS 31.50%Jul 7, 2022
- UnknownCisco application_extension_platform Stack-based Buffer OverflowPatch nowKEVEPSS 18.50%Jun 22, 2022
- High7.5libcurl provides the option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server…Check if you run itEPSS 2.90%Jun 2, 2022
- UnknownVMware Spring Framework Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 13.23%May 31, 2022
- Critical9.8dotCMS Unrestricted Upload of File VulnerabilityPatch nowKEVEPSS 91.25%May 18, 2022
- UnknownRejected reason: DO NOT USE THIS CANDIDATE NUMBER.Patch nowKEVMay 18, 2022
- UnknownApache Struts CookieInterceptor VulnerabilityPatch nowKEVEPSS 78.32%May 11, 2022
- UnknownApache Struts ParametersInterceptor ClassLoader Maniupulation VulnerabilityPatch nowKEVEPSS 98.06%May 11, 2022
- UnknownPortable phpMyAdmin Plugin before 1.3.1 for WordPress Authentication BypassPatch nowKEVEPSS 23.75%May 11, 2022
- UnknownApache log4j Deserialization of Untrusted DataPatch nowKEVEPSS 80.60%Apr 26, 2022
Sort