Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownTOTOLINK lr350_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 3.15%Mar 13, 2025
- Medium5.4Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilityPatch nowKEVEPSS 4.06%Mar 12, 2025
- Medium6.7Juniper Junos OS Improper Isolation or Compartmentalization VulnerabilityPatch nowKEVEPSS 1.74%Mar 12, 2025
- UnknownMicrosoft Windows Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 45.77%Mar 12, 2025
- Medium5.4Microsoft Windows NTLM Hash Disclosure Spoofing VulnerabilityPatch nowKEVEPSS 62.27%Mar 11, 2025
- Critical10.0AMI MegaRAC SPx Authentication Bypass by Spoofing VulnerabilityPatch nowKEVEPSS 60.75%Mar 11, 2025
- High8.1FreeType Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 27.77%Mar 11, 2025
- High7.0Microsoft Windows Management Console (MMC) Improper Neutralization VulnerabilityPatch nowKEVEPSS 30.39%Mar 11, 2025
- High7.8Microsoft Windows NTFS Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 2.22%Mar 11, 2025
- Medium5.5Microsoft Windows NTFS Out-Of-Bounds Read VulnerabilityPatch nowKEVEPSS 2.02%Mar 11, 2025
- High7.8Microsoft Windows Fast FAT File System Driver Integer Overflow VulnerabilityPatch nowKEVEPSS 3.89%Mar 11, 2025
- Medium4.6Microsoft Windows NTFS Information Disclosure VulnerabilityPatch nowKEVEPSS 1.99%Mar 11, 2025
- High7.0Microsoft Windows Win32k Use-After-Free VulnerabilityPatch nowKEVEPSS 1.38%Mar 11, 2025
- Critical10.0Apple Multiple Products WebKit Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 3.85%Mar 11, 2025
- Unknownwpplugin time_clock Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 12.41%Mar 11, 2025
- Unknownuser-meta user_meta_user_profile_builder_and_user_management Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.12%Mar 11, 2025
- UnknownIcegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin 'IG_ES_Subscribers_Query' Class SQL InjectionPatch nowKEVEPSS 80.60%Mar 11, 2025
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.78%Mar 11, 2025
- Critical9.8Apache Tomcat Path Equivalence VulnerabilityPatch nowKEVEPSS 99.93%Mar 10, 2025
- Unknownpluginus husky_-_products_filter_professional_for_woocommerce Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 56.38%Mar 10, 2025
- High8.7Commvault Web Server Unspecified VulnerabilityPatch nowKEVEPSS 2.48%Mar 7, 2025
- Unknownsfwebservice injob Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.50%Mar 7, 2025
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.43%Mar 5, 2025
- Critical9.3Edimax IC-7100 IP Camera OS Command Injection VulnerabilityPatch nowKEVEPSS 74.48%Mar 4, 2025
- High8.6NAKIVO Backup and Replication Absolute Path Traversal VulnerabilityPatch nowKEVEPSS 94.36%Mar 4, 2025