Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownbitrix24 bitrix24 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 4.51%Nov 15, 2023
- Unknownyouphptube youphptube_encoder Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 30.17%Nov 15, 2023
- UnknownCisco evolved_programmable_network_manager Improper Input ValidationPatch nowKEVEPSS 98.05%Nov 15, 2023
- UnknownCisco RV Series Routers Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 77.73%Nov 15, 2023
- UnknownApache Axis2 dswsbobje.war Remote Code ExecutionPatch nowKEVEPSS 90.85%Nov 15, 2023
- UnknownCisco IOS Improper AuthenticationPatch nowKEVEPSS 68.45%Nov 15, 2023
- High7.8Microsoft Windows Out-of-Bounds Read VulnerabilityPatch nowKEVEPSS 12.09%Nov 14, 2023
- High7.8Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation VulnerabilityPatch nowKEVEPSS 16.67%Nov 14, 2023
- High7.8Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation VulnerabilityPatch nowKEVEPSS 10.95%Nov 14, 2023
- High8.8Microsoft Windows SmartScreen Security Feature Bypass VulnerabilityPatch nowKEVEPSS 88.09%Nov 14, 2023
- UnknownVMware cloud_director Missing Authentication for Critical FunctionPatch nowKEVEPSS 1.34%Nov 14, 2023
- UnknownDynamicweb Logic Flaw Leading to Remote Code ExecutionPatch nowKEVEPSS 39.82%Nov 14, 2023
- Unknownwavlink wl-wn535k2 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 79.30%Nov 14, 2023
- Unknownreputeinfosystems pricing_table Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 13.45%Nov 14, 2023
- Unknownsubtlewebinc formcraft3 Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 20.25%Nov 14, 2023
- UnknownD-Link DIR-825 R1 Devices Improper AuthenticationPatch nowKEVEPSS 56.06%Nov 14, 2023
- UnknownGitLab CE/EE 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2 Unauthenticated User EnumerationPatch nowKEVEPSS 80.00%Nov 14, 2023
- Unknownnodered node-red-dashboard Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 18.85%Nov 14, 2023
- UnknownRocket.Chat server 3.11, 3.12 & 3.13 Remote Code ExecutionPatch nowKEVEPSS 95.24%Nov 14, 2023
- UnknownCitrix xenmobile_server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 43.93%Nov 14, 2023
- Unknownyouphptube youphptube_encoder Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 38.53%Nov 14, 2023
- UnknownIgnite Realtime Openfire Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 32.30%Nov 14, 2023
- Unknownflowpaper flexpaper Improper Input ValidationPatch nowKEVEPSS 52.54%Nov 14, 2023
- UnknownNagios Nagios XI Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 42.05%Nov 14, 2023
- UnknownMetabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 Unauthenticated Command ExecutionPatch nowKEVEPSS 98.68%Nov 13, 2023