Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownhytec hwl-2511-ss_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 90.90%Jan 21, 2024
- Unknownpluginus woot Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.95%Jan 21, 2024
- Unknowncodeastrology woo_product_table Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 25.94%Jan 21, 2024
- UnknownSecure-file-manager plugin through 2.5 for WordPress Remote Code ExecutionPatch nowKEVEPSS 18.28%Jan 21, 2024
- High7.5A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust.Check if you run itEPSS 1.39%Jan 16, 2024
- High7.5Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow VulnerabilityPatch nowKEVEPSS 57.63%Jan 16, 2024
- High8.2Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 100.00%Jan 15, 2024
- UnknownMicro Focus application_performance_management Use of Hard-coded CredentialsPatch nowKEVEPSS 74.45%Jan 13, 2024
- UnknownSchneider Electric net5501_firmware Improper AuthenticationPatch nowKEVEPSS 36.65%Jan 13, 2024
- Critical9.8GitLab Community and Enterprise Editions Improper Access Control VulnerabilityPatch nowKEVEPSS 94.46%Jan 12, 2024
- High8.8Google Chromium V8 Out-of-Bounds Memory Access VulnerabilityPatch nowKEVEPSS 3.80%Jan 11, 2024
- UnknownAI Engine: ChatGPT Chatbot Plugin File Upload VulnerabilityPatch nowKEVEPSS 63.08%Jan 11, 2024
- Critical9.1Ivanti Connect Secure and Policy Secure Command Injection VulnerabilityPatch nowKEVEPSS 100.00%Jan 10, 2024
- UnknownWPExperts post_smtp Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 90.34%Jan 10, 2024
- High8.2Ivanti Connect Secure and Policy Secure Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.99%Jan 10, 2024
- Medium6.5Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications running on PowerPC CP…Check if you run itEPSS 2.32%Jan 9, 2024
- High7.0Apple Multiple Products Memory Corruption VulnerabilityPatch nowKEVEPSS 0.49%Jan 9, 2024
- UnknownZKTeco zmm200_firmware Direct Request ('Forced Browsing')Patch nowKEVEPSS 4.97%Jan 6, 2024
- UnknownZoho manageengine_access_manager_plus Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 83.54%Jan 6, 2024
- UnknownZoho manageengine_opmanager Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 66.35%Jan 6, 2024
- Unknownseiko-sol skybridge_mb-a200_firmware Use of Hard-coded CredentialsPatch nowKEVEPSS 0.81%Jan 5, 2024
- UnknownD-Link central_wifimanager Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 44.10%Jan 4, 2024
- Unknownseagate nas_os Incorrect Permission Assignment for Critical ResourcePatch nowKEVEPSS 11.34%Jan 3, 2024
- Unknowncambiumnetworks cnpilot_r190v_firmware Active Debug CodePatch nowKEVEPSS 32.36%Jan 3, 2024
- High7.3tj-actions/changed-files has Potential Actions command injection in output filenames (GHSL-2023-271)Check if you run itEPSS 3.35%Jan 2, 2024
Sort