Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownRelative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could be used to override the specified host.Check if you run itEPSS 1.42%Nov 21, 2023
- UnknownUserPro plugin for WordPress userpro shortcut VulnerabilityPatch nowKEVEPSS 0.84%Nov 21, 2023
- UnknownApache OFBiz Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 15.91%Nov 21, 2023
- UnknownTerraMaster TOS <= 4.2.06 Unauthenticated User EnumerationPatch nowKEVEPSS 18.25%Nov 20, 2023
- Medium5.5A heap use-after-free flaw was found in coders/bmp.c in ImageMagick.Check if you run itEPSS 0.48%Nov 19, 2023
- Unknownalibaba nacos Missing Authentication for Critical FunctionPatch nowKEVEPSS 64.20%Nov 19, 2023
- Unknownkeysight sensor_management_server Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 56.82%Nov 18, 2023
- UnknownF5 big-ip_policy_enforcement_manager Improper Access ControlPatch nowKEVEPSS 6.42%Nov 18, 2023
- UnknownZoho manageengine_firewall_analyzer Improper Handling of Exceptional ConditionsPatch nowKEVEPSS 7.67%Nov 17, 2023
- Unknownbadgeos badgos Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.32%Nov 17, 2023
- Unknownnirweb nirweb_support Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 13.05%Nov 17, 2023
- Unknowneasyappointments easyappointments Exposure of Private Personal Information to an Unauthorized ActorPatch nowKEVEPSS 43.75%Nov 17, 2023
- Unknownfranklinfueling colibri_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 59.75%Nov 17, 2023
- UnknownrConfig rConfig Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 36.51%Nov 17, 2023
- UnknownD-Link dir-868l_b1_firmware Missing Authentication for Critical FunctionPatch nowKEVEPSS 56.39%Nov 17, 2023
- UnknownApache CouchDB Improper Privilege ManagementPatch nowKEVEPSS 99.84%Nov 17, 2023
- Medium4.7A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality.Check if you run itEPSS 0.25%Nov 16, 2023
- Medium4.3An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel.Check if you run itEPSS 1.64%Nov 16, 2023
- UnknownSonicWall analytics Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 72.77%Nov 16, 2023
- Unknownfrangoteam fuxa Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 25.95%Nov 16, 2023
- UnknownIvanti avalanche Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 89.10%Nov 16, 2023
- UnknownTOTOLINK a720r_firmware Missing AuthorizationPatch nowKEVEPSS 1.38%Nov 16, 2023
- Unknownspring-boot-actuator-logview_project spring-boot-actuator-logview Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 21.17%Nov 16, 2023
- High8.8An issue discovered in OpenCart 4.0.0.0 to 4.0.2.3 allows authenticated backend users having common/security write privilege can write arbitrary untrusted data inside…Check if you run itEPSS 1.78%Nov 15, 2023
- Critical9.9Qlik Sense HTTP Tunneling VulnerabilityPatch nowKEVEPSS 47.73%Nov 15, 2023
Sort