Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownOSGeo GeoServer Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 19.26%Jan 22, 2024
- Unknownbinatoneglobal halo\+_camera_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 60.16%Jan 22, 2024
- UnknownCommvault commcell Improper AuthenticationPatch nowKEVEPSS 5.42%Jan 22, 2024
- Unknownseopress seopress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.65%Jan 22, 2024
- UnknownSAP NetWeaver Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 69.08%Jan 22, 2024
- Unknownsfcyazilim sonlogger Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 47.52%Jan 22, 2024
- UnknownLumis lumis_experience_platform Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 18.13%Jan 22, 2024
- Unknownvoid aurall_rec_monitor Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 12.25%Jan 22, 2024
- UnknownWPDeveloper simple_301_redirects Missing AuthorizationPatch nowKEVEPSS 1.11%Jan 22, 2024
- Unknownde-baat store_locator_plus Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.83%Jan 22, 2024
- Unknowncars-seller-auto-classifieds-script_project cars-seller-auto-classifieds-script Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 14.70%Jan 22, 2024
- UnknownFortinet FortiWeb Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 10.52%Jan 22, 2024
- UnknownZTE mf971r_firmware Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 55.71%Jan 22, 2024
- Unknownrevive-adserver revive_adserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 6.98%Jan 22, 2024
- Unknowninstructure canvas_learning_management_service Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 6.59%Jan 22, 2024
- UnknownIBM maximo_asset_management Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 31.59%Jan 22, 2024
- UnknownLinksys re6500_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 32.94%Jan 22, 2024
- Unknownqcubed qcubed Deserialization of Untrusted DataPatch nowKEVEPSS 4.98%Jan 22, 2024
- UnknownWSO2 api_manager Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 26.28%Jan 22, 2024
- Unknownarticatech web_proxy Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 82.37%Jan 22, 2024
- UnknownMitel micollab_audio\,_web_\&_video_conferencing Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 48.77%Jan 22, 2024
- UnknownRed Hat keycloak Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 69.72%Jan 22, 2024
- UnknownAtlassian Jira Server and Data Center Incorrect AuthorizationPatch nowKEVEPSS 17.55%Jan 22, 2024
- UnknownOracle Fusion Middleware BI Publisher Unauthenticated Security BypassPatch nowKEVEPSS 1.71%Jan 22, 2024
- UnknownOracle Fusion Middleware BI Publisher Unauthenticated Security BypassPatch nowKEVEPSS 36.54%Jan 22, 2024