Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Citrix Session Recording Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 14.64%Nov 12, 2024
- Medium5.1Citrix Session Recording Improper Privilege Management VulnerabilityPatch nowKEVEPSS 3.48%Nov 12, 2024
- High8.8Microsoft Windows Task Scheduler Privilege Escalation VulnerabilityPatch nowKEVEPSS 14.18%Nov 12, 2024
- Medium6.5Microsoft Windows NTLMv2 Hash Disclosure Spoofing VulnerabilityPatch nowKEVEPSS 84.27%Nov 12, 2024
- UnknownFour-Faith adjust_sys_time OS Command InjectionPatch nowKEVEPSS 84.12%Nov 9, 2024
- High7.8Linux Kernel Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 3.40%Nov 7, 2024
- Medium5.5Linux Kernel Use of Uninitialized Resource VulnerabilityPatch nowKEVEPSS 0.81%Nov 7, 2024
- Unknownrocket.chat rocket.chat Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 3.20%Nov 7, 2024
- UnknownBallistix MOD Utility MODAPI.sys Privilege Escalation VulnerabilityPatch nowKEVEPSS 0.56%Nov 6, 2024
- UnknownEVGA Precision WinRing0.sys and WinRing0x64.sys Privilege Escalation VulnerabilityPatch nowKEVEPSS 0.60%Nov 6, 2024
- High7.3Android Framework Privilege Escalation VulnerabilityPatch nowKEVEPSS 0.71%Nov 4, 2024
- UnknownSplunk splunk Path Traversal: '.../...//'Patch nowKEVEPSS 13.01%Nov 3, 2024
- UnknownSiSMART Dashboard Insecure Direct Object Reference (IDOR) Horizontal-Privilege Escalation VulnerabilityPatch nowKEVEPSS 0.70%Nov 2, 2024
- UnknownApple ipados Improper Link Resolution Before File Access ('Link Following')Patch nowKEVEPSS 0.75%Nov 2, 2024
- UnknownZyxel dx5401-b0_firmware Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 5.42%Nov 1, 2024
- UnknownZyxel ax7501-b0_firmware Improper Link Resolution Before File Access ('Link Following')Patch nowKEVEPSS 0.25%Nov 1, 2024
- UnknownIvanti Connect Secure and Policy Secure Out-of-bounds WritePatch nowKEVEPSS 18.99%Oct 30, 2024
- Unknownpostgresql postgresql_jdbc_driver Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.81%Oct 30, 2024
- UnknownAI Power: Complete AI Pack plugin for WordPress handle_image_upload Function Arbitrary File Upload VulnerabilityPatch nowKEVEPSS 14.98%Oct 30, 2024
- Unknownozette simple_mobile_url_redirect Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 1.61%Oct 30, 2024
- UnknownCyberPanel /filemanager/upload Remote Code Execution VulnerabilityPatch nowKEVEPSS 47.67%Oct 29, 2024
- Critical9.8CyberPanel Incorrect Default Permissions VulnerabilityPatch nowKEVEPSS 84.40%Oct 29, 2024
- UnknownApple icloud Improper AuthenticationPatch nowKEVEPSS 2.19%Oct 29, 2024
- UnknownApple ipados Improper Input ValidationPatch nowKEVEPSS 2.00%Oct 29, 2024
- Critical9.8Cleo Multiple Products Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 98.61%Oct 27, 2024