Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

Critical9.8Ajax.NET Professional Deserialization of Untrusted Data VulnerabilityVuln · CVE-2021-23758 · Ajax.NET Professional · Ajax.NET Professional · CISA KEV · CVE.org · FIRST EPSS · MicrosoftPatch nowKEVEPSS 82.58%Dec 3, 2021
Critical9.8Zoho ManageEngine ServiceDesk Plus Remote Code Execution VulnerabilityVuln · CVE-2021-44077 · Zoho · ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus · CISA KEV · CVE.org · FIRST EPSS · ManageEnginePatch nowKEVEPSS 93.30%Nov 28, 2021
Critical9.8Roundcube Webmail SQL Injection VulnerabilityVuln · CVE-2021-44026 · Roundcube · Roundcube Webmail · CISA KEV · CVE.org · FIRST EPSS · RoundcubePatch nowKEVEPSS 69.88%Nov 18, 2021
High7.5Metabase GeoJSON API Local File Inclusion VulnerabilityVuln · CVE-2021-41277 · Metabase · Metabase · CISA KEV · CVE.org · FIRST EPSS · MetabasePatch nowKEVEPSS 97.18%Nov 17, 2021
High7.5Microsoft Active Directory Domain Services Privilege Escalation VulnerabilityVuln · CVE-2021-42287 · Microsoft · Active Directory · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 77.17%Nov 9, 2021
High7.5Microsoft Active Directory Domain Services Privilege Escalation VulnerabilityVuln · CVE-2021-42278 · Microsoft · Active Directory · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 73.30%Nov 9, 2021
Medium5.5Microsoft Windows Installer Privilege Escalation VulnerabilityVuln · CVE-2021-41379 · Microsoft · Windows · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 19.45%Nov 9, 2021
High8.8Microsoft Exchange Server Remote Code Execution VulnerabilityVuln · CVE-2021-42321 · Microsoft · Exchange Server · CISA KEV · CVE.org · FIRST EPSS · Exchange, MicrosoftPatch nowKEVEPSS 91.74%Nov 9, 2021
High7.8Microsoft Excel Security Feature BypassVuln · CVE-2021-42292 · Microsoft · Office · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 43.00%Nov 9, 2021
High7.8Android Kernel Use-After-Free VulnerabilityVuln · CVE-2021-1048 · Android · Android · CISA KEV · CVE.org · FIRST EPSS · Android, GooglePatch nowKEVEPSS 1.06%Nov 6, 2021
Critical9.8Sitecore XP Remote Command Execution VulnerabilityVuln · CVE-2021-42237 · Sitecore · XP · CISA KEV · CVE.org · FIRST EPSS · SitecorePatch nowKEVEPSS 97.57%Nov 5, 2021
Medium6.4Android Kernel Race Condition VulnerabilityVuln · CVE-2021-0920 · Android · Android · CISA KEV · CVE.org · FIRST EPSS · Android, LinuxPatch nowKEVEPSS 0.87%Nov 5, 2021
High8.8Google Chromium V8 Memory Corruption VulnerabilityVuln · CVE-2021-38003 · Google · Chromium V8 · CISA KEV · CVE.org · FIRST EPSS · Chrome, GooglePatch nowKEVEPSS 38.57%Oct 26, 2021
Critical9.8BQE BillQuick Web Suite SQL Injection VulnerabilityVuln · CVE-2021-42258 · BQE · BillQuick Web Suite · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 74.43%Oct 22, 2021
High7.5Draytek VigorConnect Path Traversal VulnerabilityVuln · CVE-2021-20124 · DrayTek · VigorConnect · CISA KEV · CVE.org · FIRST EPSS · DrayTekPatch nowKEVEPSS 96.31%Oct 13, 2021
High7.5Draytek VigorConnect Path Traversal VulnerabilityVuln · CVE-2021-20123 · DrayTek · VigorConnect · CISA KEV · CVE.org · FIRST EPSS · DrayTekPatch nowKEVEPSS 90.23%Oct 13, 2021
High7.8Microsoft Win32k Privilege Escalation VulnerabilityVuln · CVE-2021-41357 · Microsoft · Win32k · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 1.58%Oct 12, 2021
High7.8Microsoft Win32k Privilege Escalation VulnerabilityVuln · CVE-2021-40450 · Microsoft · Win32k · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 1.58%Oct 12, 2021
High7.8Microsoft Windows Win32k Privilege Escalation VulnerabilityVuln · CVE-2021-40449 · Microsoft · Windows · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 74.13%Oct 12, 2021
Critical9.8Apache HTTP Server Path Traversal VulnerabilityVuln · CVE-2021-42013 · Alpine · Alpine Linux · Alpine Linux Security · CISA KEV · CVE.org · ApachePatch nowKEVEPSS 99.96%Oct 7, 2021
High7.3Grafana Authentication Bypass VulnerabilityVuln · CVE-2021-39226 · Grafana Labs · Grafana · CISA KEV · CVE.org · FIRST EPSS · GrafanaPatch nowKEVEPSS 99.93%Oct 5, 2021
Critical9.8Apache HTTP Server Path Traversal VulnerabilityVuln · CVE-2021-41773 · Alpine · Alpine Linux · Alpine Linux Security · CISA KEV · CVE.org · ApachePatch nowKEVEPSS 99.99%Sep 29, 2021
Medium6.5SonicWall SMA100 Appliances OS Command Injection VulnerabilityVuln · CVE-2021-20035 · SonicWall · SMA100 Appliances · CISA KEV · CVE.org · FIRST EPSS · SonicWallPatch nowKEVEPSS 4.18%Sep 27, 2021
High7.5D-Link DIR-605 Router Information Disclosure VulnerabilityVuln · CVE-2021-40655 · D-Link · DIR-605 Router · CISA KEV · CVE.org · FIRST EPSS · D-LinkPatch nowKEVEPSS 86.66%Sep 24, 2021
High8.8Google Chromium V8 Use-After-Free VulnerabilityVuln · CVE-2021-37975 · Google · Chromium V8 · CISA KEV · CVE.org · FIRST EPSS · Chrome, GooglePatch nowKEVEPSS 34.89%Sep 24, 2021