Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknowncraftercms crafter_cms Transmission of Private Resources into a New Sphere ('Resource Leak')Patch nowKEVEPSS 1.70%Feb 27, 2025
- UnknownD-Link dir-823_firmware Stack-based Buffer OverflowPatch nowKEVEPSS 79.73%Feb 27, 2025
- Unknowndahuasecurity dvr Improper AuthenticationPatch nowKEVEPSS 69.68%Feb 27, 2025
- UnknownVMware ESXi Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 83.38%Feb 27, 2025
- Unknownnombas scriptease_webserver Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.88%Feb 27, 2025
- UnknownX Server Disabled Access Control VulnerabilityPatch nowKEVEPSS 20.82%Feb 27, 2025
- UnknownMicrosoft Windows Improper Access ControlPatch nowKEVEPSS 4.52%Feb 26, 2025
- UnknownMicrosoft xbox_gaming_services Improper Link Resolution Before File Access ('Link Following')Patch nowKEVEPSS 0.65%Feb 26, 2025
- UnknownMicrosoft Windows Improper Link Resolution Before File Access ('Link Following')Patch nowKEVEPSS 1.38%Feb 26, 2025
- UnknownLinux Kernel Use After FreePatch nowKEVEPSS 12.73%Feb 26, 2025
- Unknownkrpano krpano Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 4.12%Feb 26, 2025
- UnknownNextChat NextChat Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 2.17%Feb 25, 2025
- UnknownFortinet FortiSIEM Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.29%Feb 25, 2025
- UnknownFortinet FortiSIEM Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 80.30%Feb 25, 2025
- Unknownbuffalo wsr-2533dhpl2-bk_firmware Improper AuthenticationPatch nowKEVEPSS 8.17%Feb 25, 2025
- UnknownVMware Spring Framework Unintended Proxy or Intermediary ('Confused Deputy')Patch nowKEVEPSS 10.21%Feb 25, 2025
- Critical9.8XWiki Platform Eval Injection VulnerabilityPatch nowKEVEPSS 99.86%Feb 20, 2025
- Critical9.8Microsoft Power Pages Improper Access Control VulnerabilityPatch nowKEVEPSS 1.62%Feb 19, 2025
- Unknownusualtool usualtoolcms Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 73.62%Feb 18, 2025
- UnknownOracle WebLogic Server Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.82%Feb 13, 2025
- UnknownPostgreSQL Quoting APIs SQL Injection VulnerabilityPatch nowKEVEPSS 90.03%Feb 13, 2025
- High7.1Palo Alto Networks PAN-OS File Read VulnerabilityPatch nowKEVEPSS 2.00%Feb 12, 2025
- High8.8Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityPatch nowKEVEPSS 98.45%Feb 12, 2025
- UnknownTOTOLINK a3300r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.17%Feb 12, 2025
- UnknownTOTOLINK a3300r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.17%Feb 12, 2025