Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownkevinlab 4st_l-bems Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 6.54%Nov 13, 2023
- UnknownApache Druid 0.20.0 Remote Command ExecutionPatch nowKEVEPSS 99.06%Nov 13, 2023
- Unknownjellyfin jellyfin Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 79.31%Nov 13, 2023
- UnknownAdobe ColdFusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 37.09%Nov 13, 2023
- Unknownsearchblox searchblox Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 13.98%Nov 13, 2023
- Unknownagentejo cockpit Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 50.26%Nov 13, 2023
- Unknownsonarsource sonarqube Missing Authentication for Critical FunctionPatch nowKEVEPSS 15.97%Nov 13, 2023
- Unknownkyocera d-copia253mf_plus_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 35.00%Nov 13, 2023
- Unknownphpgurukul hospital_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 6.35%Nov 13, 2023
- Unknownmyucms_project myucms Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 3.23%Nov 13, 2023
- UnknownWSO2 api_manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 26.22%Nov 13, 2023
- UnknownrConfig rConfig Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 87.33%Nov 13, 2023
- Unknownnortekcontrol linear_emerge_essential_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 81.87%Nov 13, 2023
- Unknownyouphptube youphptube_encoder Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 45.30%Nov 13, 2023
- Unknowndedecms dedecms Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 74.12%Nov 13, 2023
- UnknownElastic Kibana External Control of File Name or PathPatch nowKEVEPSS 84.29%Nov 13, 2023
- Unknownboa boa Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 68.46%Nov 13, 2023
- UnknownNETGEAR readynas_surveillance_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 8.17%Nov 13, 2023
- UnknownSynacor Zimbra Collaboration Suite (ZCS) Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 86.31%Nov 13, 2023
- Medium4.3CVE-2023-47037 is listed by We failed to apply CVE-2023-40611 in 2.7.1 and this vulnerability was marked as fixed then..Check if you run itEPSS 1.50%Nov 12, 2023
- Medium6.5CVE-2023-42781 is listed by inventory_high.Check if you run itEPSS 1.66%Nov 12, 2023
- Medium6.1CVE-2023-46735 is listed by Symfony is a PHP framework for web and console applications and a set of reusable PHP components..Check if you run itEPSS 0.57%Nov 10, 2023
- Medium6.1CVE-2023-46734 is listed by Symfony is a PHP framework for web and console applications and a set of reusable PHP components..Check if you run itEPSS 0.69%Nov 10, 2023
- Medium6.5CVE-2023-46733 is listed by Symfony is a PHP framework for web and console applications and a set of reusable PHP components..Check if you run itEPSS 0.69%Nov 10, 2023
- High7.2CVE-2023-23367 is listed by An OS command injection vulnerability has been reported to affect several QNAP operating system versions..Check if you run itEPSS 1.50%Nov 10, 2023
Sort