Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Lowpersonnummer/dart vulnerable to Improper Input ValidationCheck if you run itEPSS 0.49%Sep 19, 2022
- UnknownMozilla Firefox Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Patch nowKEVEPSS 26.71%Aug 15, 2022
- UnknownMozilla Firefox Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Patch nowKEVEPSS 17.10%Aug 15, 2022
- High7.3In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metac…Check this weekEPSS 96.39%Jun 21, 2022
- Unknowncodepress visitor_statistics Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 38.30%May 31, 2022
- High8.1An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making…Check if you run itEPSS 2.52%May 26, 2022
- UnknownApache Struts CookieInterceptor VulnerabilityPatch nowKEVEPSS 78.32%May 11, 2022
- UnknownApache Struts ParametersInterceptor ClassLoader Maniupulation VulnerabilityPatch nowKEVEPSS 98.06%May 11, 2022
- High7.3The c_rehash script does not properly sanitise shell metacharacters to prevent command injection.Check this weekEPSS 82.61%May 3, 2022
- UnknownASRock RGB Driver AsrDrv103.sys Triple FaultPatch nowKEVEPSS 1.36%Apr 13, 2022
- Critical9.8Apache CouchDB Insecure Default Initialization of Resource VulnerabilityPatch nowKEVEPSS 92.51%Mar 6, 2022
- High7.5A flaw was found in python.Check this weekEPSS 13.17%Mar 4, 2022
- High7.2Reolink RLC-410W IP Camera OS Command Injection VulnerabilityPatch nowKEVEPSS 47.63%Jan 28, 2022
- UnknownWordPress wordpress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 6.52%Jan 26, 2022
- UnknownMicrosoft Windows Improper Input ValidationPatch nowKEVEPSS 23.07%Dec 15, 2021
- UnknownMicrosoft Windows Win32k Keyboard Layout Privilege EscalationPatch nowKEVEPSS 14.56%Dec 15, 2021
- High7.5A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server ( on the command line or set to or wit…Check if you run itEPSS 4.54%Sep 29, 2021
- UnknownBuffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 Configuration InjectionPatch nowKEVEPSS 8.46%Sep 20, 2021
- UnknownWPEverest user_registration Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.62%Sep 6, 2021
- UnknownMicrosoft Windows Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 10.52%Aug 19, 2021
- UnknownMicrosoft Windows Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 8.36%Aug 19, 2021
- UnknownMicrosoft Windows Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 10.71%Aug 19, 2021
- UnknownLinux Kernel overlayfs Privilege EscalationPatch nowKEVEPSS 37.68%Aug 19, 2021
- UnknownMicrosoft Edge Out-of-bounds WritePatch nowKEVEPSS 20.99%Aug 17, 2021
- High7.5ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to c…Check this weekEPSS 10.51%Jul 22, 2021