Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.0Microsoft Windows User Profile Service Privilege Escalation VulnerabilityPatch nowKEVEPSS 2.43%Jan 11, 2022
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 59.20%Jan 11, 2022
- UnknownGo Ethereum (Geth) Time-Difference Value Manipulation VulnerabilityPatch nowKEVEPSS 1.27%Jan 3, 2022
- High8.1Acclaim Systems USAHERDS Use of Hard-Coded Credentials VulnerabilityPatch nowKEVEPSS 17.58%Dec 21, 2021
- Unknownraspap raspap Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 17.45%Dec 21, 2021
- High7.5Omnissa Workspace ONE Server-Side Request ForgeryPatch nowKEVEPSS 99.68%Dec 17, 2021
- Medium6.1Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 30.93%Dec 16, 2021
- High7.8Microsoft Windows Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.28%Dec 15, 2021
- UnknownMicrosoft Windows Untrusted Search PathPatch nowKEVEPSS 70.96%Dec 15, 2021
- UnknownSiemens simatic_pcs7 Untrusted Search PathPatch nowKEVEPSS 0.45%Dec 15, 2021
- UnknownMicrosoft Windows Improper Input ValidationPatch nowKEVEPSS 23.07%Dec 15, 2021
- UnknownMicrosoft Windows Win32k Keyboard Layout Privilege EscalationPatch nowKEVEPSS 14.56%Dec 15, 2021
- High7.1Microsoft Windows AppX Installer Spoofing VulnerabilityPatch nowKEVEPSS 11.29%Dec 14, 2021
- Unknownaioseo all_in_one_seo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.29%Dec 14, 2021
- Unknownaioseo all_in_one_seo Improper AuthenticationPatch nowKEVEPSS 3.03%Dec 14, 2021
- UnknownNovell Client for Windows NICM.SYS Local Privilege Escalation VulnerabilityPatch nowKEVEPSS 7.80%Dec 13, 2021
- High8.8Google Chromium V8 Use-After-Free VulnerabilityPatch nowKEVEPSS 7.84%Dec 9, 2021
- Unknownautomattic wp_super_cache Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 27.67%Dec 9, 2021
- Critical9.8Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection VulnerabilityPatch nowKEVEPSS 99.11%Dec 8, 2021
- Unknownmetagauss registrationmagic Improper AuthenticationPatch nowKEVEPSS 6.84%Dec 8, 2021
- High7.5Grafana Path Traversal VulnerabilityPatch nowKEVEPSS 88.50%Dec 7, 2021
- Critical9.0Apache Log4j2 Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.98%Dec 6, 2021
- Critical10.0Apache Log4j2 Remote Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Dec 6, 2021
- Critical9.8Ajax.NET Professional Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 82.58%Dec 3, 2021
- Critical9.8Roundcube Webmail SQL Injection VulnerabilityPatch nowKEVEPSS 69.88%Nov 18, 2021
Sort