Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownDrayTek vigor300b_firmware Out-of-bounds WritePatch nowKEVEPSS 20.88%Jan 12, 2022
- UnknownDrayTek vigor300b_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 39.39%Jan 12, 2022
- UnknownTP-Link tl-r600vpn_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 53.30%Jan 12, 2022
- UnknownTP-Link tl-r600vpn_firmware Improper Input ValidationPatch nowKEVEPSS 23.06%Jan 12, 2022
- UnknownIBM tealeaf_cx Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 29.07%Jan 12, 2022
- Unknownecava integraxor Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 26.48%Jan 12, 2022
- Unknownamentotech workreap Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 60.11%Dec 21, 2021
- High7.5Omnissa Workspace ONE Server-Side Request ForgeryPatch nowKEVEPSS 99.68%Dec 17, 2021
- High7.5GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 36.14%Dec 13, 2021
- Unknownpublishpress capabilities Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 6.69%Dec 6, 2021
- Unknownwpwax directorist Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.84%Nov 16, 2021
- Unknownlegalweb wp_dsgvo_tools Improper Access ControlPatch nowKEVEPSS 3.84%Nov 2, 2021
- Critical9.8Apache HTTP Server Path Traversal VulnerabilityPatch nowKEVEPSS 99.96%Oct 7, 2021
- Critical9.8Apache HTTP Server Path Traversal VulnerabilityPatch nowKEVEPSS 99.99%Sep 29, 2021
- High7.5D-Link DIR-605 Router Information Disclosure VulnerabilityPatch nowKEVEPSS 86.66%Sep 24, 2021
- Critical9.8F5 BIG-IP Missing Authentication VulnerabilityPatch nowKEVEPSS 99.95%Sep 23, 2021
- UnknownApache OFBiz Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 98.93%Sep 22, 2021
- Critical9.0Apache HTTP Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 100.00%Sep 16, 2021
- UnknownPHP-Fusion 9.03.50 downloads/downloads.php Authenticated Remote Code ExecutionPatch nowKEVEPSS 67.52%Sep 16, 2021
- UnknownPinterest Automatic plugin for WordPress Authorization BypassPatch nowKEVEPSS 4.49%Sep 6, 2021
- Critical9.1October CMS Improper AuthenticationPatch nowKEVEPSS 90.42%Aug 26, 2021
- UnknownWindows Remote Desktop Protocol (RDP) Information DisclosurePatch nowKEVEPSS 12.60%Aug 19, 2021
- UnknownZTE F460 and F660 Cable Modems web_shell_cmd.gch Security BypassPatch nowKEVEPSS 59.26%Aug 19, 2021
- Critical9.8ForgeRock Access Management (AM) Core Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Jul 22, 2021
- UnknownKaseya vsa Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 58.76%Jul 6, 2021
Sort