Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Kaseya Virtual System/Server Administrator (VSA) Information Disclosure VulnerabilityPatch nowKEVEPSS 85.73%Jul 2, 2021
- Unknownacme mini_httpd Improper Input ValidationPatch nowKEVEPSS 10.19%Jun 24, 2021
- Critical9.8GitLab Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 53.37%Jun 11, 2021
- Unknownvestacp control_panel Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')Patch nowKEVEPSS 6.39%Jun 3, 2021
- UnknownWordPress REST API register_routes function in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php VulnerabilityPatch nowKEVEPSS 84.94%Jun 2, 2021
- Unknownmagmi_project magmi Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 14.72%Jun 1, 2021
- Critical9.8Tenda AC11 Router Stack Buffer Overflow VulnerabilityPatch nowKEVEPSS 86.51%May 7, 2021
- Critical9.8ASUS Routers Improper Authentication VulnerabilityPatch nowKEVEPSS 99.39%May 6, 2021
- Unknowncleantalk spam_protection\,_antispam\,_firewall Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.69%May 3, 2021
- Critical9.8Tenda g0_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 25.37%Apr 16, 2021
- UnknownApache Shiro with Spring Dynamic Controllers Authentication BypassPatch nowKEVEPSS 23.33%Apr 12, 2021
- UnknownApache olingo Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 12.25%Apr 12, 2021
- Unknownnevma adaptive_images Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 63.38%Apr 12, 2021
- UnknownApache Solr Deserialization of Untrusted DataPatch nowKEVEPSS 78.23%Apr 12, 2021
- Unknownjoomlaworks k2 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.31%Apr 12, 2021
- Unknownzh_baidumap_project zh_baidumap Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 57.70%Apr 12, 2021
- UnknownLinksys ea3500_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 4.01%Apr 12, 2021
- Critical9.8SonicWall Email Security Improper Privilege Management VulnerabilityPatch nowKEVEPSS 88.78%Apr 9, 2021
- Unknownsupervisord supervisor Incorrect Default PermissionsPatch nowKEVEPSS 87.55%Apr 8, 2021
- Medium5.3curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header.Check if you run itEPSS 5.30%Apr 1, 2021
- Critical9.8F5 BIG-IP Traffic Management Microkernel Buffer OverflowPatch nowKEVEPSS 61.06%Mar 31, 2021
- High7.5VMware Server Side Request Forgery in vRealize Operations Manager APIPatch nowKEVEPSS 78.00%Mar 31, 2021
- Unknownelementor Website Builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.75%Mar 17, 2021
- Unknownelementor Website Builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.75%Mar 17, 2021
- Unknownelementor Website Builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.75%Mar 17, 2021
Sort