Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownwavlink wn579x3_firmware Direct Request ('Forced Browsing')Patch nowKEVEPSS 6.55%Jan 2, 2024
- Unknownarticatech artica_proxy Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 53.97%Jan 2, 2024
- UnknownApache OFBiz Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 95.37%Dec 29, 2023
- Unknownwebtoprint web_to_print_shop\ Files or Directories Accessible to External PartiesPatch nowKEVEPSS 7.88%Dec 25, 2023
- High7.0OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_a…Check if you run itEPSS 0.66%Dec 24, 2023
- UnknownBarracuda ESG Appliance ParseExcel Code Execution VulnerabilityPatch nowKEVEPSS 44.57%Dec 24, 2023
- UnknownHP edgeline_infrastructure_manager Missing Authentication for Critical FunctionPatch nowKEVEPSS 68.29%Dec 24, 2023
- Unknownpatreon patreon_wordpress Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 5.93%Dec 24, 2023
- Medium5.9A vulnerability was found in systemd-resolved.Check if you run itEPSS 0.85%Dec 23, 2023
- UnknownWordPress BuddyBoss Theme Authentication VulnerabilityPatch nowKEVEPSS 0.70%Dec 23, 2023
- UnknownWordPress wordpress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 97.80%Dec 23, 2023
- Unknownkainelabs youzify Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.81%Dec 23, 2023
- UnknownKaseya vsa Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 60.35%Dec 23, 2023
- UnknownVMware vRealize Log Insight Information DisclosurePatch nowKEVEPSS 24.00%Dec 20, 2023
- UnknownVMware vrealize_log_insight Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 87.08%Dec 20, 2023
- UnknownVMware vRealize Remote Code ExecutionPatch nowKEVEPSS 81.01%Dec 20, 2023
- UnknownRSVPMaker plugin for WordPress Unauthenticated SQL InjectionPatch nowKEVEPSS 12.86%Dec 20, 2023
- UnknownMicrosoft Windows Use of Uninitialized ResourcePatch nowKEVEPSS 10.48%Dec 20, 2023
- High8.8Google Chromium WebRTC Heap Buffer Overflow VulnerabilityPatch nowKEVEPSS 6.67%Dec 19, 2023
- Medium6.5In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token…Check this weekEPSS 19.75%Dec 18, 2023
- Medium5.5In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied.Check if you run itEPSS 0.43%Dec 18, 2023
- Medium5.9OpenBSD openssh Improper Validation of Integrity Check ValuePatch nowKEVEPSS 93.55%Dec 18, 2023
- UnknownWordPress Social Login and Register plugin for WordPress Authentication BypassPatch nowKEVEPSS 46.24%Dec 18, 2023
- Unknownsecurepoint unified_threat_management Use of Uninitialized ResourcePatch nowKEVEPSS 4.07%Dec 14, 2023
- UnknownOracle E-Business Suite Application Mgmt Pack for E-Business Suite VulnerabilityPatch nowKEVEPSS 3.81%Dec 14, 2023
Sort