Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Metabase GeoJSON API Local File Inclusion VulnerabilityPatch nowKEVEPSS 97.18%Nov 17, 2021
- Unknownwebnus modern_events_calendar_lite Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 72.80%Nov 15, 2021
- UnknownTOTOLINK a3002ru Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 25.14%Nov 11, 2021
- High7.5Microsoft Active Directory Domain Services Privilege Escalation VulnerabilityPatch nowKEVEPSS 77.17%Nov 9, 2021
- High7.5Microsoft Active Directory Domain Services Privilege Escalation VulnerabilityPatch nowKEVEPSS 73.30%Nov 9, 2021
- Medium5.5Microsoft Windows Installer Privilege Escalation VulnerabilityPatch nowKEVEPSS 19.45%Nov 9, 2021
- Unknownroundupwp registrations_for_the_events_calendar Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 7.30%Nov 8, 2021
- High7.5In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit a spurious '\0' character via crafted ISO-2022-JP-3 data…Check if you run itEPSS 3.29%Nov 4, 2021
- Unknownlegalweb wp_dsgvo_tools Improper Access ControlPatch nowKEVEPSS 3.84%Nov 2, 2021
- High7.5Draytek VigorConnect Path Traversal VulnerabilityPatch nowKEVEPSS 96.31%Oct 13, 2021
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 1.58%Oct 12, 2021
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 1.58%Oct 12, 2021
- UnknownOracle Fusion Middleware WebLogic Server Coherence Container Security BypassPatch nowKEVEPSS 8.44%Oct 7, 2021
- UnknownCisco RV Series Routers Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 64.41%Oct 7, 2021
- UnknownCisco RV Series Routers Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 72.03%Oct 7, 2021
- Critical9.8Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands vi…Check if you run itEPSS 3.50%Oct 1, 2021
- Medium6.5SonicWall SMA100 Appliances OS Command Injection VulnerabilityPatch nowKEVEPSS 4.41%Sep 27, 2021
- High7.0sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initializ…Check if you run itEPSS 2.54%Sep 26, 2021
- High7.5D-Link DIR-605 Router Information Disclosure VulnerabilityPatch nowKEVEPSS 86.66%Sep 24, 2021
- High8.8Google Chromium V8 Use-After-Free VulnerabilityPatch nowKEVEPSS 34.89%Sep 24, 2021
- Critical9.1When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use t…Check if you run itEPSS 6.68%Sep 23, 2021
- Medium5.3VMware vCenter Server Improper Access ControlPatch nowKEVEPSS 49.18%Sep 23, 2021
- Critical9.8VMware vCenter Server File Upload VulnerabilityPatch nowKEVEPSS 100.00%Sep 23, 2021
- Unknownninjaforms ninja_forms Incorrect AuthorizationPatch nowKEVEPSS 0.66%Sep 22, 2021
- UnknownHeap-buffer-overflow in get_next_owned_entityOpen the advisorySep 21, 2021
Sort