Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownZyxel nwa1100-nh_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 71.05%May 26, 2022
- Unknownkramerav viaware Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 54.39%May 26, 2022
- Unknownkramerav viaware Improper Privilege ManagementPatch nowKEVEPSS 70.75%May 26, 2022
- Unknownthedaylightstudio Fuel CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 82.94%May 26, 2022
- High8.8WebKitGTK Memory Corruption VulnerabilityPatch nowKEVEPSS 1.56%May 23, 2022
- Medium6.5Cisco IOS XR Open Port VulnerabilityPatch nowKEVEPSS 11.47%May 20, 2022
- Unknownweblizar school_management Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 64.08%May 20, 2022
- Critical9.1QNAP Photo Station Externally Controlled Reference VulnerabilityPatch nowKEVEPSS 87.91%May 18, 2022
- Critical9.8dotCMS Unrestricted Upload of File VulnerabilityPatch nowKEVEPSS 91.25%May 18, 2022
- UnknownApple iphone_os Out-of-bounds ReadPatch nowKEVEPSS 11.03%May 18, 2022
- UnknownRejected reason: DO NOT USE THIS CANDIDATE NUMBER.Patch nowKEVMay 18, 2022
- Critical9.8SolarView Compact Command Injection VulnerabilityPatch nowKEVEPSS 98.04%May 12, 2022
- Critical9.8Zyxel Multiple Firewalls OS Command Injection VulnerabilityPatch nowKEVEPSS 99.94%May 12, 2022
- Critical9.8mingsoft mcms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.46%May 11, 2022
- UnknownApache Struts Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')Patch nowKEVEPSS 85.43%May 11, 2022
- UnknownApache Struts CookieInterceptor VulnerabilityPatch nowKEVEPSS 78.32%May 11, 2022
- UnknownApache Struts ParametersInterceptor ClassLoader Maniupulation VulnerabilityPatch nowKEVEPSS 98.06%May 11, 2022
- UnknownApache Struts ParametersInterceptor VulnerabilityPatch nowKEVEPSS 99.39%May 11, 2022
- UnknownPortable phpMyAdmin Plugin before 1.3.1 for WordPress Authentication BypassPatch nowKEVEPSS 23.75%May 11, 2022
- High8.8Microsoft Active Directory Domain Services Privilege Escalation VulnerabilityPatch nowKEVEPSS 83.50%May 10, 2022
- Medium5.9Microsoft Windows LSA Spoofing VulnerabilityPatch nowKEVEPSS 10.48%May 10, 2022
- High7.5RARLAB UnRAR Directory Traversal VulnerabilityPatch nowKEVEPSS 99.23%May 9, 2022
- UnknownCloudways Breeze Plugin Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 0.57%May 2, 2022
- UnknownApache log4j Deserialization of Untrusted DataPatch nowKEVEPSS 80.60%Apr 26, 2022
- Critical9.8Mitel MiVoice Connect Data Validation VulnerabilityPatch nowKEVEPSS 55.24%Apr 25, 2022