Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownApache OFBiz Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 15.91%Nov 21, 2023
- UnknownTerraMaster TOS <= 4.2.06 Unauthenticated User EnumerationPatch nowKEVEPSS 18.25%Nov 20, 2023
- Unknownalibaba nacos Missing Authentication for Critical FunctionPatch nowKEVEPSS 65.72%Nov 19, 2023
- Unknownkeysight sensor_management_server Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 54.94%Nov 18, 2023
- UnknownF5 big-ip_policy_enforcement_manager Improper Access ControlPatch nowKEVEPSS 6.42%Nov 18, 2023
- UnknownZoho manageengine_firewall_analyzer Improper Handling of Exceptional ConditionsPatch nowKEVEPSS 7.25%Nov 17, 2023
- Unknownbadgeos badgos Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.32%Nov 17, 2023
- Unknownnirweb nirweb_support Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 13.05%Nov 17, 2023
- Unknowneasyappointments easyappointments Exposure of Private Personal Information to an Unauthorized ActorPatch nowKEVEPSS 43.75%Nov 17, 2023
- Unknownfranklinfueling colibri_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 59.75%Nov 17, 2023
- UnknownrConfig rConfig Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 36.51%Nov 17, 2023
- UnknownJira CachingResourceDownloadRewriteRule class Security BypassPatch nowKEVEPSS 59.83%Nov 17, 2023
- UnknownD-Link dir-868l_b1_firmware Missing Authentication for Critical FunctionPatch nowKEVEPSS 56.39%Nov 17, 2023
- UnknownApache CouchDB Improper Privilege ManagementPatch nowKEVEPSS 99.84%Nov 17, 2023
- UnknownSonicWall analytics Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 72.77%Nov 16, 2023
- Unknownfrangoteam fuxa Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 25.95%Nov 16, 2023
- UnknownIvanti avalanche Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 89.10%Nov 16, 2023
- UnknownTOTOLINK a720r_firmware Missing AuthorizationPatch nowKEVEPSS 1.38%Nov 16, 2023
- Unknownspring-boot-actuator-logview_project spring-boot-actuator-logview Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 21.01%Nov 16, 2023
- Critical9.9Qlik Sense HTTP Tunneling VulnerabilityPatch nowKEVEPSS 47.45%Nov 15, 2023
- UnknownCitrix ShareFile Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 81.17%Nov 15, 2023
- UnknownCisco RV Series Routers Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 90.11%Nov 15, 2023
- Unknownsoftwarepublico i3geo Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 13.60%Nov 15, 2023
- Unknowndogtagpki dogtagpki Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 85.39%Nov 15, 2023
- Unknownintelliantech aptus_web Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 82.99%Nov 15, 2023