Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.8Sophos Firewall Code Injection VulnerabilityKEVEPSS 98.9%Sep 23, 2022
- Critical10.0OSGeo GeoServer JAI-EXT Code Injection VulnerabilityKEVEPSS 99.9%Apr 13, 2022
- Critical9.8VMware Workspace ONE Access and Identity Manager Server-Side Template Injection VulnerabilityKEVEPSS 100.0%Apr 11, 2022
- Critical9.8Spring Framework JDK 9+ Remote Code Execution VulnerabilityKEVEPSS 99.6%Apr 1, 2022
- Critical9.8VMware Tanzu Spring Cloud Function Remote Code Execution VulnerabilityKEVEPSS 99.9%Apr 1, 2022
- Critical10.0VMware Spring Cloud Gateway Code Injection VulnerabilityKEVEPSS 98.3%Mar 3, 2022
- Critical9.8Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection VulnerabilityKEVEPSS 99.1%Dec 8, 2021
- High8.5XStream Remote Code Execution VulnerabilityKEVEPSS 98.1%Aug 23, 2021
- High7.2Ivanti Pulse Connect Secure Unrestricted File Upload VulnerabilityKEVEPSS 14.1%May 27, 2021
- High8.8Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow VulnerabilityKEVEPSS 41.3%May 27, 2021
- Critical10.0GitLab Community and Enterprise Editions Remote Code Execution VulnerabilityKEVEPSS 99.7%Apr 23, 2021
- High7.8ExifTool Remote Code Execution VulnerabilityKEVEPSS 100.0%Apr 23, 2021
- High7.2Ivanti Pulse Connect Secure Code Execution VulnerabilityKEVEPSS 90.8%Sep 30, 2020
- High7.2Pulse Connect Secure Code Injection VulnerabilityKEVEPSS 32.3%Jul 30, 2020
- Critical9.8PlaySMS Server-Side Template Injection VulnerabilityKEVEPSS 86.7%Feb 5, 2020
- Critical9.9MongoDB mongo-express Remote Code Execution VulnerabilityKEVEPSS 84.7%Dec 24, 2019
- Critical9.8IBM Planning Analytics Remote Code Execution VulnerabilityKEVEPSS 86.4%Dec 18, 2019
- Critical9.8vBulletin PHP Module Remote Code Execution VulnerabilityKEVEPSS 99.7%Sep 24, 2019
- High7.2Apache Solr DataImportHandler Code Injection VulnerabilityKEVEPSS 83.5%Aug 1, 2019
- High7.8A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl <= 7.65.1 automatically run th…Jul 2, 2019
- Critical10.0Kibana Arbitrary Code ExecutionKEVEPSS 95.3%Mar 25, 2019
- High8.8ThinkPHP Remote Code Execution VulnerabilityKEVEPSS 97.4%Feb 24, 2019
- Critical9.8Red Hat JBoss RichFaces Framework Expression Language Injection VulnerabilityKEVEPSS 74.2%Nov 6, 2018
- Critical9.8Drupal Core Remote Code Execution VulnerabilityKEVEPSS 99.2%Jul 19, 2018
- Critical9.8VMware Tanzu Spring Data Commons Property Binder VulnerabilityKEVEPSS 97.0%Apr 11, 2018