Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control VulnerabilityPatch nowKEVEPSS 59.81%Feb 13, 2024
- Medium6.1deconf analytics_insights URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 1.25%Feb 12, 2024
- Critical9.3Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.86%Feb 12, 2024
- UnknownExim before 4.92.2 Trailing Backslash Remote Code ExecutionPatch nowKEVEPSS 35.74%Feb 8, 2024
- Unknownsquirrelly squirrelly Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 58.29%Feb 7, 2024
- Critical9.8exrick xmall Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.35%Feb 6, 2024
- UnknownIvanti Connect Secure and Policy Secure Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 94.72%Feb 6, 2024
- Unknownhoneywell pm43_firmware Improper Input ValidationPatch nowKEVEPSS 49.04%Feb 6, 2024
- UnknownIvanti avalanche Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 96.58%Jan 31, 2024
- Medium5.5Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summary: Applications lo…Check if you run itEPSS 3.19%Jan 26, 2024
- High7.8Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid, raid5 modules) allows Forced Integer Overflow.Check if you run itEPSS 0.58%Jan 25, 2024
- Unknownwpengine better_search_replace Deserialization of Untrusted DataPatch nowKEVEPSS 68.05%Jan 25, 2024
- Unknownreadtomyshoe_project readtomyshoe Generation of Error Message Containing Sensitive InformationPatch nowKEVEPSS 3.86%Jan 22, 2024
- UnknownFontsy WordPress plugin through 1.8.6 SQL InjectionPatch nowKEVEPSS 4.76%Jan 22, 2024
- UnknownH3C gr3200_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 10.80%Jan 22, 2024
- Unknowncuppacms cuppacms Inclusion of Functionality from Untrusted Control SpherePatch nowKEVEPSS 9.97%Jan 22, 2024
- Unknowncuppacms cuppacms Inclusion of Functionality from Untrusted Control SpherePatch nowKEVEPSS 7.93%Jan 22, 2024
- Unknownwpwax directorist Missing AuthorizationPatch nowKEVEPSS 1.84%Jan 22, 2024
- UnknownSAP NetWeaver Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 69.08%Jan 22, 2024
- Unknowncars-seller-auto-classifieds-script_project cars-seller-auto-classifieds-script Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 14.70%Jan 22, 2024
- Unknownrevive-adserver revive_adserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 6.98%Jan 22, 2024
- Unknowninstructure canvas_learning_management_service Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 6.59%Jan 22, 2024
- UnknownWestern Digital my_cloud_pr4100_firmware Improper AuthenticationPatch nowKEVEPSS 73.40%Jan 22, 2024
- Critical9.8D-Link DIR-859 Router Path Traversal VulnerabilityPatch nowKEVEPSS 82.71%Jan 21, 2024
- UnknownSecurity exception in java.base/java.util.Arrays.copyOfOpen the advisoryJan 21, 2024
Sort