Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownBarracuda Networks barracuda_spam_firewall Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 8.77%Dec 1, 2020
- UnknownBarracuda Networks barracuda_spam_firewall Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 53.37%Dec 1, 2020
- Unknownawstats awstats Improper Input ValidationPatch nowKEVEPSS 74.94%Dec 1, 2020
- UnknownApple darwin_streaming_server Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 68.86%Dec 1, 2020
- Critical9.1Multiple VMware Products Command Injection VulnerabilityPatch nowKEVEPSS 17.30%Nov 23, 2020
- Unknownstd42 elfinder Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 96.73%Nov 22, 2020
- Unknownyeager yeager_cms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 8.44%Nov 22, 2020
- Unknownmagmi_project magmi Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 38.46%Nov 22, 2020
- High8.8Drupal core Un-restricted Upload of FilePatch nowKEVEPSS 36.17%Nov 20, 2020
- High7.8PEAR Archive_Tar Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 84.55%Nov 19, 2020
- Medium5.5Qualcomm Multiple Chipsets Detection of Error Condition Without Action VulnerabilityPatch nowKEVEPSS 0.52%Nov 17, 2020
- High7.8Qualcomm Multiple Chipsets Use-After-Free VulnerabilityPatch nowKEVEPSS 1.54%Nov 17, 2020
- Critical9.8Apache Airflow's Experimental API Authentication BypassPatch nowKEVEPSS 99.78%Nov 10, 2020
- UnknownUltimate Member ultimate_member Improper Privilege ManagementPatch nowKEVEPSS 8.46%Nov 9, 2020
- High8.8Google Chromium V8 Incorrect Implementation VulnerabililtyPatch nowKEVEPSS 2.76%Nov 9, 2020
- Critical9.6Google Chrome Use-After-Free VulnerabilityPatch nowKEVEPSS 2.73%Nov 7, 2020
- Critical9.8SaltStack Salt Shell Injection VulnerabilityPatch nowKEVEPSS 99.59%Nov 6, 2020
- Unknownszuray iptv\/h.264_video_encoder_firmware Missing Authentication for Critical FunctionPatch nowKEVEPSS 40.30%Nov 6, 2020
- UnknownD-Link dir-816l_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 20.86%Nov 6, 2020
- Unknownt-mobile tm-ac1900 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 9.45%Nov 6, 2020
- High7.1Samsung Mobile Devices Improper Access Control VulnerabilityPatch nowKEVEPSS 2.81%Nov 3, 2020
- Critical9.8Oracle WebLogic Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.25%Nov 2, 2020
- Critical9.6Google Chrome for Android UI Heap Buffer Overflow VulnerabilityPatch nowKEVEPSS 6.36%Oct 31, 2020
- UnknownWordPress wordpress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.72%Oct 29, 2020
- Medium5.5Apple Multiple Products Memory Initialization VulnerabilityPatch nowKEVEPSS 16.52%Oct 29, 2020