Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownTOTOLINK x6000r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.95%Feb 12, 2025
- High8.1Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityPatch nowKEVEPSS 7.23%Feb 11, 2025
- High7.8Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 1.57%Feb 11, 2025
- High7.1Microsoft Windows Storage Link Following VulnerabilityPatch nowKEVEPSS 2.30%Feb 11, 2025
- UnknownDell emc_avamar Missing AuthorizationPatch nowKEVEPSS 50.87%Feb 11, 2025
- Critical9.9Wazuh Server Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 93.84%Feb 10, 2025
- Medium6.1Apple iOS and iPadOS Incorrect Authorization VulnerabilityPatch nowKEVEPSS 4.42%Feb 10, 2025
- UnknownFour-Faith F3x36 Router bapply.cgi Authentication Bypass VulnerabilityPatch nowKEVEPSS 0.67%Feb 9, 2025
- Unknownmod_authnz_external_project mod_authnz_external Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.66%Feb 7, 2025
- High8.6Trimble Cityworks Deserialization VulnerabilityPatch nowKEVEPSS 31.09%Feb 6, 2025
- UnknownBridge Core Plugin for WordPress 'import_action' and 'install_plugin_per_demo' Bypass VulnerabilityPatch nowKEVEPSS 0.32%Feb 5, 2025
- High7.1Essential Addons for Elementor Reflected Cross Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 1.21%Feb 4, 2025
- UnknownNetis Router skk_get.cgi Information Disclosure VulnerabilityPatch nowKEVEPSS 6.29%Feb 4, 2025
- High7.5Advantive VeraCore SQL Injection VulnerabilityPatch nowKEVEPSS 55.55%Feb 3, 2025
- High8.8Advantive VeraCore Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 32.28%Feb 3, 2025
- UnknownWSO2 User Registration Arbitrary Account CreationPatch nowKEVEPSS 0.66%Feb 2, 2025
- Unknownabb aspect-ent-12_firmware Improper Validation of Specified Type of InputPatch nowKEVEPSS 19.01%Feb 2, 2025
- UnknownLiferay digital_experience_platform URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 0.97%Jan 29, 2025
- High8.8Zyxel DSL CPE OS Command Injection VulnerabilityPatch nowKEVEPSS 21.70%Jan 28, 2025
- High8.8Zyxel DSL CPE OS Command Injection VulnerabilityPatch nowKEVEPSS 20.70%Jan 28, 2025
- UnknownSolarWinds dameware_mini_remote_control Origin Validation ErrorPatch nowKEVEPSS 5.14%Jan 28, 2025
- Critical10.0Apple Multiple Products Use-After-Free VulnerabilityPatch nowKEVEPSS 17.51%Jan 27, 2025
- UnknownWordPress Oshine Modules Plugin Server Side Request Forgery (SSRF)Patch nowKEVEPSS 0.26%Jan 27, 2025
- High7.07-Zip Mark of the Web Bypass VulnerabilityPatch nowKEVEPSS 67.07%Jan 24, 2025
- UnknownVeeam Service Provider Console Remote Code Execution VulnerabilityPatch nowKEVEPSS 19.93%Jan 23, 2025