Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownmeritlilin p2r8852e2_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 2.08%Nov 25, 2023
- Unknownalibaba nacos Missing Authentication for Critical FunctionPatch nowKEVEPSS 65.72%Nov 19, 2023
- UnknownCisco evolved_programmable_network_manager Improper Input ValidationPatch nowKEVEPSS 98.05%Nov 15, 2023
- Unknownreputeinfosystems pricing_table Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 13.45%Nov 14, 2023
- UnknownIWS WordPress plugin through 1.0 SQL InjectionPatch nowKEVEPSS 5.01%Nov 13, 2023
- UnknownJoomSport WordPress plugin before 5.2.8 SQL InjectionPatch nowKEVEPSS 4.81%Nov 13, 2023
- Unknownroyal-elementor-addons royal_elementor_addons Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 86.35%Oct 13, 2023
- Critical9.8In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.Check if you run itEPSS 3.46%Aug 22, 2023
- UnknownWin32k Elevation of PrivilegePatch nowKEVEPSS 5.93%Jun 28, 2023
- UnknownVMware workstation Uncontrolled Search Path ElementPatch nowKEVEPSS 9.03%Jun 22, 2023
- Critical9.8Barracuda Networks ESG Appliance Improper Input Validation VulnerabilityPatch nowKEVEPSS 87.69%May 18, 2023
- Critical9.8Fortra Cobalt Strike User Interface Remote Code Execution VulnerabilityPatch nowKEVEPSS 2.71%Mar 24, 2023
- Unknown10Web Map Builder for Google Maps WordPress Plugin AJAX SQL InjectionPatch nowKEVEPSS 3.91%Mar 3, 2023
- Medium6.5A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs ar…Check if you run itEPSS 0.88%Feb 23, 2023
- Critical9.1A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially.Check if you run itEPSS 0.90%Feb 23, 2023
- High7.5The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO.Check if you run itEPSS 5.02%Feb 8, 2023
- High7.3SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and…Check if you run itEPSS 0.45%Dec 12, 2022
- UnknownMicrosoft Windows Improper Privilege ManagementPatch nowKEVEPSS 47.72%Nov 30, 2022
- High7.8Dante Discovery Process Control VulnerabilityPatch nowKEVEPSS 8.33%Nov 17, 2022
- UnknownWin32k Memory Allocation VulnerabilityPatch nowKEVEPSS 12.18%Nov 3, 2022
- Unknownnewsmag_project newsmag Improper AuthenticationPatch nowKEVEPSS 3.83%Oct 24, 2022
- Lowpersonnummer/dart vulnerable to Improper Input ValidationCheck if you run itEPSS 0.49%Sep 19, 2022
- UnknownMozilla Firefox Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Patch nowKEVEPSS 26.71%Aug 15, 2022
- UnknownMozilla Firefox Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Patch nowKEVEPSS 17.10%Aug 15, 2022
- High7.3In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metac…Check this weekEPSS 96.39%Jun 21, 2022