Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknowneaton intelligent_power_manager Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 19.48%Nov 26, 2023
- UnknownSplunk splunk Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 98.22%Nov 26, 2023
- Unknownartica pandora_fms Improper Input ValidationPatch nowKEVEPSS 6.44%Nov 26, 2023
- Unknownluracast restler Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 15.33%Nov 26, 2023
- Unknowndahuasecurity smart_parking_management Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 73.67%Nov 25, 2023
- Unknowncontec solarview_compact Incorrect Default PermissionsPatch nowKEVEPSS 60.22%Nov 25, 2023
- UnknownJEECG jeecg-boot Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 36.07%Nov 25, 2023
- Unknownkubeview_project kubeview Missing Authentication for Critical FunctionPatch nowKEVEPSS 51.70%Nov 25, 2023
- Unknown3cx 3cx Insufficiently Protected CredentialsPatch nowKEVEPSS 8.35%Nov 25, 2023
- Unknownmeritlilin p2r8852e2_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 2.08%Nov 25, 2023
- UnknownApache Flink Relative Path TraversalPatch nowKEVEPSS 49.10%Nov 25, 2023
- UnknownApache cocoon Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 72.46%Nov 25, 2023
- Unknownlimesurvey limesurvey Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 96.99%Nov 25, 2023
- Medium6.5An out-of-memory flaw was found in libtiff.Check if you run itEPSS 1.82%Nov 24, 2023
- Low3.2Exposed IOCTL with Insufficient Access ControlPatch nowKEVEPSS 0.30%Nov 23, 2023
- Unknowndahuasecurity dh-ipc-hdbw23a0rn-zs_firmware Use of Password Hash Instead of Password for AuthenticationPatch nowKEVEPSS 36.75%Nov 23, 2023
- High7.5It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.Check if you run itEPSS 0.84%Nov 22, 2023
- High8.8An issue was found with how API keys are created with the Fleet-Server service account.Check if you run itEPSS 0.71%Nov 22, 2023
- Unknownuserproplugin userpro Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 6.75%Nov 22, 2023
- Unknowndigitalzoomstudio zoomsounds Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 65.76%Nov 22, 2023
- Unknownays-pro secure_copy_content_protection_and_content_locking Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 78.81%Nov 22, 2023
- Unknownsuperwebmailer superwebmailer Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 32.84%Nov 22, 2023
- Medium5.3salesagility suitecrm Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 3.00%Nov 21, 2023
- Critical9.8ownCloud Improper Authentication VulnerabilityPatch nowKEVEPSS 43.19%Nov 21, 2023
- High7.5ownCloud graphapi Information Disclosure VulnerabilityPatch nowKEVEPSS 77.75%Nov 21, 2023
Sort