Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1welaunch wordpress_country_selector Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.40%Apr 25, 2022
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 17.63%Apr 20, 2022
- Critical10.0OSGeo GeoServer JAI-EXT Code Injection VulnerabilityPatch nowKEVEPSS 99.91%Apr 13, 2022
- UnknownASRock RGB Driver AsrDrv103.sys Triple FaultPatch nowKEVEPSS 1.35%Apr 13, 2022
- Unknownirz ru21_firmware Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 33.70%Apr 12, 2022
- UnknownTOTOLINK a830r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 5.69%Apr 1, 2022
- High7.5The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli.Check this weekEPSS 73.19%Mar 15, 2022
- Medium6.5There's a flaw in urllib's AbstractBasicAuthHandler class.Check if you run itEPSS 4.80%Mar 10, 2022
- Critical10.0VMware Spring Cloud Gateway Code Injection VulnerabilityPatch nowKEVEPSS 98.25%Mar 3, 2022
- Unknownapache2 CVE-2019-10098Patch nowKEVEPSS 73.98%Feb 22, 2022
- Unknownapache2 CVE-2019-0190Patch nowKEVEPSS 59.05%Feb 22, 2022
- Unknownapache2 CVE-2018-8011Patch nowKEVEPSS 55.61%Feb 22, 2022
- Unknownapache2 CVE-2018-1303Patch nowKEVEPSS 69.80%Feb 22, 2022
- Unknownapache2 CVE-2017-9798Patch nowKEVEPSS 95.00%Feb 22, 2022
- UnknownApache HTTP Server Improper Input ValidationPatch nowKEVEPSS 56.77%Feb 22, 2022
- Unknownapache2 CVE-2017-7668Patch nowKEVEPSS 57.47%Feb 22, 2022
- Unknownapache2 CVE-2017-7659Patch nowKEVEPSS 53.94%Feb 22, 2022
- Unknownatt communication_manager Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.06%Feb 20, 2022
- High7.8Red Hat Polkit Incorrect Authorization VulnerabilityPatch nowKEVEPSS 23.71%Feb 16, 2022
- Critical9.8Apache APISIX Authentication Bypass VulnerabilityPatch nowKEVEPSS 96.07%Feb 11, 2022
- Critical10.0SAP Multiple Products HTTP Request Smuggling VulnerabilityPatch nowKEVEPSS 97.95%Feb 9, 2022
- High7.2Reolink RLC-410W IP Camera OS Command Injection VulnerabilityPatch nowKEVEPSS 47.63%Jan 28, 2022
- UnknownWordPress wordpress Weak Password Recovery Mechanism for Forgotten PasswordPatch nowKEVEPSS 26.70%Jan 26, 2022
- UnknownIBM jazz_reporting_service Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.55%Jan 26, 2022
- UnknownDrayTek vigor300b_firmware Out-of-bounds WritePatch nowKEVEPSS 20.88%Jan 12, 2022
Sort