Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Microsoft Windows Runtime Remote Code Execution VulnerabilityPatch nowKEVEPSS 53.78%Feb 9, 2022
- UnknownMasterStudy LMS WordPress New Account Authentication BypassPatch nowKEVEPSS 85.33%Feb 1, 2022
- High7.8Red Hat Polkit Out-of-Bounds Read and Write VulnerabilityPatch nowKEVEPSS 94.92%Jan 28, 2022
- High7.2Reolink RLC-410W IP Camera OS Command Injection VulnerabilityPatch nowKEVEPSS 47.63%Jan 28, 2022
- High7.0Linux Kernel Privilege Escalation VulnerabilityPatch nowKEVEPSS 6.59%Jan 26, 2022
- Critical9.8Apple Memory Corruption VulnerabilityPatch nowKEVEPSS 11.64%Jan 26, 2022
- UnknownSolarWinds Orion Uncontrolled Search Path ElementPatch nowKEVEPSS 2.78%Jan 26, 2022
- Unknownopenweave openweave-core Heap-based Buffer OverflowPatch nowKEVEPSS 1.62%Jan 26, 2022
- Unknownmaxthon maxthon_browser Unquoted Search Path or ElementPatch nowKEVEPSS 1.96%Jan 26, 2022
- UnknownGNU GNU C Library (glibc) Out-of-bounds WritePatch nowKEVEPSS 13.37%Jan 26, 2022
- UnknownWordPress wordpress Weak Password Recovery Mechanism for Forgotten PasswordPatch nowKEVEPSS 26.70%Jan 26, 2022
- Unknowncaddy_project caddy Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.03%Jan 26, 2022
- Unknownopensuse leap Missing AuthorizationPatch nowKEVEPSS 14.95%Jan 26, 2022
- UnknownWordPress wordpress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 10.20%Jan 26, 2022
- UnknownCPUID CPU-Z through 1.81 Kernel-Mode Driver Privilege EscalationPatch nowKEVEPSS 0.38%Jan 26, 2022
- UnknownWordPress wordpress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.71%Jan 26, 2022
- UnknownWordPress wordpress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 6.52%Jan 26, 2022
- UnknownIBM jazz_reporting_service Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.55%Jan 26, 2022
- Unknownubercart ubercart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.16%Jan 26, 2022
- Unknownad_inserter_pro_project ad_inserter_pro Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.06%Jan 24, 2022
- Critical9.8Oracle Fusion Middleware Unspecified VulnerabilityPatch nowKEVEPSS 96.28%Jan 19, 2022
- UnknownMicrosoft Exchange Server Remote Code ExecutionPatch nowKEVEPSS 13.01%Jan 17, 2022
- Critical9.8NUUO NVRmini2 Devices Missing Authentication VulnerabilityPatch nowKEVEPSS 48.50%Jan 14, 2022
- Medium5.3Zabbix Frontend Improper Access Control VulnerabilityPatch nowKEVEPSS 95.26%Jan 13, 2022
- Critical9.8Zabbix Frontend Authentication Bypass VulnerabilityPatch nowKEVEPSS 95.68%Jan 13, 2022