Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownxtendify woffice Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.33%Jul 1, 2024
- Medium6.7Cisco NX-OS Command Injection VulnerabilityPatch nowKEVEPSS 4.31%Jul 1, 2024
- UnknownZoho ManageEngine ADManager Plus Authenticated VulnerabilityPatch nowKEVEPSS 11.13%Jul 1, 2024
- UnknownQuest kace_systems_management Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 9.55%Jun 29, 2024
- Unknownmailster mailster Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.27%Jun 28, 2024
- High7.5lollms lollms_web_ui Absolute Path TraversalPatch nowKEVEPSS 1.94%Jun 27, 2024
- High7.5stitionai devika External Control of File Name or PathPatch nowKEVEPSS 2.07%Jun 27, 2024
- Critical9.1Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer.Check if you run itEPSS 5.58%Jun 27, 2024
- Unknownemilia progress_planner Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.26%Jun 27, 2024
- UnknownWP Lab wp-lister_lite_for_amazon Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.62%Jun 27, 2024
- Unknownwpextended wp_extended Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.62%Jun 27, 2024
- Unknownnetis-systems mw5360_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 70.78%Jun 27, 2024
- UnknownXWiki xwiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 34.52%Jun 26, 2024
- Unknowncoffee_shop_pos_system_project coffee_shop_pos_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.64%Jun 26, 2024
- UnknownCrestron hd-md4x2-4k-e_firmware Improper AuthenticationPatch nowKEVEPSS 75.16%Jun 26, 2024
- Critical9.8Craft CMS up to v3.7.31 was discovered to contain a SQL injection vulnerability via the GraphQL API endpoint.Check this weekEPSS 53.24%Jun 25, 2024
- Critical9.1Fortra filecatalyst_workflow Improper Input ValidationPatch nowKEVEPSS 90.07%Jun 25, 2024
- High8.8HashiCorp’s go-getter library can be coerced into executing Git update on an existing maliciously modified Git Configuration, potentially leading to arbitrary code execution.Check if you run itEPSS 0.98%Jun 25, 2024
- Critical9.1Improper Authentication vulnerability in Progress MOVEit Gateway (SFTP modules) allows Authentication Bypass.This issue affects MOVEit Gateway: 2024.0.0.Check if you run itEPSS 6.76%Jun 25, 2024
- High7.1In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors The error handling in nilfs_e…Check if you run itEPSS 0.25%Jun 25, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: smb: client: fix deadlock in smb2_find_smb_tcon() Unlock cifs_tcp_ses_lock before calling cifs_put_…Check if you run itEPSS 0.53%Jun 25, 2024
- Medium5.3The vCenter Server contains a denial-of-service vulnerability.Check if you run itEPSS 0.71%Jun 25, 2024
- Medium6.8VMware ESXi contains an out-of-bounds read vulnerability.Check if you run itEPSS 0.19%Jun 25, 2024
- Critical9.8Progress WhatsUp Gold Path Traversal VulnerabilityPatch nowKEVEPSS 99.29%Jun 25, 2024
- UnknownProgress MOVEit Transfer SFTP Module Authentication BypassPatch nowKEVEPSS 81.14%Jun 25, 2024
Sort