Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Yealink Device Management Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 82.86%Mar 15, 2021
- UnknownThemeum tutor_lms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.25%Mar 15, 2021
- UnknownThemeum tutor_lms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.74%Mar 15, 2021
- High7.5When responding to new h2c connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41 and 8.5.0 to 8.5.61 could duplicate request headers and…Check this weekEPSS 18.11%Mar 1, 2021
- Low2.5The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33, when processing a request for netgroup lookup, may crash due to a dou…Check if you run itEPSS 0.39%Feb 24, 2021
- Medium5.3VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 88.01%Feb 24, 2021
- Critical9.8Accellion FTA OS Command Injection VulnerabilityPatch nowKEVEPSS 56.69%Feb 16, 2021
- Critical9.8Accellion FTA Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 11.41%Feb 16, 2021
- Critical9.8Accellion FTA SQL Injection VulnerabilityPatch nowKEVEPSS 6.00%Feb 16, 2021
- Medium5.9The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache…Check this weekEPSS 40.74%Feb 15, 2021
- High8.8Nagios XI OS Command InjectionPatch nowKEVEPSS 73.64%Feb 15, 2021
- High8.8Nagios XI OS Command InjectionPatch nowKEVEPSS 56.66%Feb 15, 2021
- High8.8Nagios XI OS Command InjectionPatch nowKEVEPSS 71.94%Feb 15, 2021
- High7.2Adminer Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 98.46%Feb 11, 2021
- UnknownMicrosoft SharePoint Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 4.42%Jan 21, 2021
- UnknownJQuery JQuery Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 29.73%Jan 21, 2021
- UnknownRed Hat cloudforms Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 26.72%Dec 28, 2020
- UnknownrConfig rConfig Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 71.64%Dec 14, 2020
- Unknownwp-ecommerce easy_wp_smtp Insertion of Sensitive Information into Log FilePatch nowKEVEPSS 60.38%Dec 13, 2020
- High7.5A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs.Check if you run itEPSS 3.15%Dec 8, 2020
- Unknowngvectors wpdiscuz Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 12.61%Dec 6, 2020
- Unknownbeckhoff ipc_diagnostics Improper Access ControlPatch nowKEVEPSS 5.74%Dec 1, 2020
- Unknownrocketsoftware rocket_servergraph Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 72.61%Dec 1, 2020
- Unknownmicasaverde veralite_firmware Improper AuthenticationPatch nowKEVEPSS 12.18%Dec 1, 2020
- Critical9.8Apache Airflow's Experimental API Authentication BypassPatch nowKEVEPSS 99.78%Nov 10, 2020
Sort