Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.8Apache Tomcat Path Equivalence VulnerabilityKEVEPSS 99.9%Mar 10, 2025
- Critical9.8XWiki Platform Eval Injection VulnerabilityKEVEPSS 99.9%Feb 20, 2025
- Critical9.9Wazuh Server Deserialization of Untrusted Data VulnerabilityKEVEPSS 93.8%Feb 10, 2025
- High7.5SimpleHelp Path Traversal VulnerabilityKEVEPSS 96.6%Jan 15, 2025
- Critical9.3Craft CMS Code Injection VulnerabilityKEVEPSS 97.4%Dec 18, 2024
- Critical9.8BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection VulnerabilityKEVEPSS 87.3%Dec 16, 2024
- Critical9.8Cleo Multiple Products Unauthenticated File Upload VulnerabilityKEVEPSS 94.0%Dec 13, 2024
- Critical9.8ProjectSend Improper Authentication VulnerabilityKEVEPSS 91.8%Nov 26, 2024
- Medium6.9Palo Alto Networks PAN-OS Management Interface OS Command Injection VulnerabilityKEVEPSS 94.8%Nov 18, 2024
- Critical9.3Palo Alto Networks PAN-OS Management Interface Authentication Bypass VulnerabilityKEVEPSS 99.9%Nov 18, 2024
- Critical9.8CyberPanel Incorrect Default Permissions VulnerabilityKEVEPSS 86.6%Oct 29, 2024
- Critical9.8CyberPanel Incorrect Default Permissions VulnerabilityKEVEPSS 94.7%Oct 29, 2024
- Critical9.8Cleo Multiple Products Unrestricted File Upload VulnerabilityKEVEPSS 98.6%Oct 27, 2024
- Critical9.8Fortinet FortiManager Missing Authentication VulnerabilityKEVEPSS 94.8%Oct 23, 2024
- Critical9.8Progress WhatsUp Gold SQL Injection VulnerabilityKEVEPSS 93.0%Aug 29, 2024
- Critical9.1SolarWinds Web Help Desk Hardcoded Credential VulnerabilityKEVEPSS 93.3%Aug 21, 2024
- Critical9.8Ivanti Virtual Traffic Manager Authentication Bypass VulnerabilityKEVEPSS 100.0%Aug 13, 2024
- Critical9.8Samsung MagicINFO 9 Server Path Traversal VulnerabilityKEVEPSS 91.9%Aug 12, 2024
- Critical9.8Apache OFBiz Incorrect Authorization VulnerabilityKEVEPSS 99.4%Aug 5, 2024
- Critical9.8Acronis Cyber Infrastructure (ACI) Insecure Default Password VulnerabilityKEVEPSS 53.3%Jul 24, 2024
- Critical9.3Palo Alto Networks Expedition Missing Authentication VulnerabilityKEVEPSS 91.7%Jul 10, 2024
- Critical9.8OSGeo GeoServer GeoTools Eval Injection VulnerabilityKEVEPSS 99.8%Jul 1, 2024
- Critical9.8Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) VulnerabilityKEVEPSS 100.0%Jun 13, 2024
- High7.8Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference VulnerabilityKEVEPSS 25.2%Jun 11, 2024
- High7.0Microsoft Windows Kernel TOCTOU Race Condition VulnerabilityKEVEPSS 68.2%Jun 11, 2024