Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Acclaim Systems USAHERDS Use of Hard-Coded Credentials VulnerabilityPatch nowKEVEPSS 17.58%Dec 21, 2021
- Unknownraspap raspap Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 17.45%Dec 21, 2021
- UnknownweDevs wp_user_frontend Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 17.12%Dec 21, 2021
- Unknownamentotech workreap Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 60.11%Dec 21, 2021
- High7.5Omnissa Workspace ONE Server-Side Request ForgeryPatch nowKEVEPSS 99.68%Dec 17, 2021
- Medium6.1Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 30.93%Dec 16, 2021
- Unknownblocksera image_hover_effects Improper Access ControlPatch nowKEVEPSS 6.53%Dec 16, 2021
- High7.8Microsoft Windows Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.28%Dec 15, 2021
- UnknownWindows WalletService Privilege EscalationPatch nowKEVEPSS 3.49%Dec 15, 2021
- UnknownMicrosoft Windows Untrusted Search PathPatch nowKEVEPSS 70.96%Dec 15, 2021
- UnknownSiemens simatic_pcs7 Untrusted Search PathPatch nowKEVEPSS 0.46%Dec 15, 2021
- UnknownMicrosoft Windows Improper Input ValidationPatch nowKEVEPSS 23.07%Dec 15, 2021
- UnknownMicrosoft Windows Win32k Keyboard Layout Privilege EscalationPatch nowKEVEPSS 14.56%Dec 15, 2021
- High7.1Microsoft Windows AppX Installer Spoofing VulnerabilityPatch nowKEVEPSS 11.29%Dec 14, 2021
- Unknownaioseo all_in_one_seo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.29%Dec 14, 2021
- High7.5GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 36.14%Dec 13, 2021
- Unknowncpuid cpu-z Out-of-bounds WritePatch nowKEVEPSS 1.53%Dec 13, 2021
- UnknownNovell Client for Windows NICM.SYS Local Privilege Escalation VulnerabilityPatch nowKEVEPSS 7.80%Dec 13, 2021
- Critical9.8Zoho Desktop Central Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.87%Dec 10, 2021
- High8.8Google Chromium V8 Use-After-Free VulnerabilityPatch nowKEVEPSS 7.84%Dec 9, 2021
- Unknownautomattic wp_super_cache Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 27.67%Dec 9, 2021
- Critical9.8Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection VulnerabilityPatch nowKEVEPSS 99.11%Dec 8, 2021
- High8.8FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploitPatch nowKEVEPSS 39.68%Dec 8, 2021
- Critical9.8SonicWall SMA 100 Appliances Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.91%Dec 8, 2021
- UnknownTP-Link tl-wr840n_firmware Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 76.05%Dec 8, 2021