Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 17.63%Apr 20, 2022
- High7.2Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityPatch nowKEVEPSS 98.68%Apr 20, 2022
- High7.5Synacor Zimbra Collaboration Suite (ZCS) Command Injection VulnerabilityPatch nowKEVEPSS 93.91%Apr 20, 2022
- Critical9.8Oracle ADF Faces Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 62.48%Apr 19, 2022
- Critical9.8microfinance_management_system_project microfinance_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 13.83%Apr 19, 2022
- Critical9.8WSO2 Multiple Products Unrestrictive Upload of File VulnerabilityPatch nowKEVEPSS 100.00%Apr 18, 2022
- Medium6.8Zoho ManageEngine ADSelfService Plus Remote Code Execution VulnerabilityPatch nowKEVEPSS 70.97%Apr 14, 2022
- High7.0Microsoft Windows User Profile Service Privilege Escalation VulnerabilityPatch nowKEVEPSS 16.95%Apr 14, 2022
- UnknownRemote Procedure Call Runtime Remote Code ExecutionPatch nowKEVEPSS 90.96%Apr 14, 2022
- Critical10.0OSGeo GeoServer JAI-EXT Code Injection VulnerabilityPatch nowKEVEPSS 99.91%Apr 13, 2022
- High8.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 13.92%Apr 13, 2022
- Unknownelementor Website Builder Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 92.66%Apr 13, 2022
- UnknownASRock RGB Driver AsrDrv103.sys Triple FaultPatch nowKEVEPSS 1.36%Apr 13, 2022
- UnknownZhone zNID GPON 2426A backupsettings.html VulnerabilityPatch nowKEVEPSS 5.44%Apr 13, 2022
- Unknowndasanzhone znid_2426a_firmware Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 5.64%Apr 13, 2022
- Unknownirz ru21_firmware Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 33.70%Apr 12, 2022
- High7.8Microsoft Windows CLFS Driver Privilege Escalation VulnerabilityPatch nowKEVEPSS 7.13%Apr 12, 2022
- Unknownseowonintech slc-130_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 73.63%Apr 12, 2022
- Unknowndasanzhone znid_2426a_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 53.36%Apr 12, 2022
- High7.5TerraMaster OS Remote Command Execution VulnerabilityPatch nowKEVEPSS 83.17%Apr 11, 2022
- High7.8VMware Multiple Products Privilege Escalation VulnerabilityPatch nowKEVEPSS 35.52%Apr 6, 2022
- Critical9.8VMware Workspace ONE Access and Identity Manager Server-Side Template Injection VulnerabilityPatch nowKEVEPSS 100.00%Apr 6, 2022
- Critical9.8dompdf_project dompdf Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 82.85%Apr 3, 2022
- Critical9.8Spring Framework JDK 9+ Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.64%Apr 1, 2022
- Critical9.8VMware Tanzu Spring Cloud Function Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.94%Apr 1, 2022