Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownIntel hyperscan_library Insufficient Control Flow ManagementPatch nowKEVEPSS 0.17%Nov 20, 2024
- Unknownrevive-adserver revive_adserver URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 69.56%Nov 20, 2024
- UnknownOracle Coherence Product of Oracle Fusion Middleware Core Components IIOP/T3 VulnerabilityPatch nowKEVEPSS 74.75%Nov 20, 2024
- UnknownMicrosoft Jet Database Engine VBA Shell VulnerabilityPatch nowKEVEPSS 3.73%Nov 20, 2024
- Medium6.3Apple Multiple Products Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 22.59%Nov 19, 2024
- High8.8Apple Multiple Products Code Execution VulnerabilityPatch nowKEVEPSS 10.16%Nov 19, 2024
- UnknownWindows CSC Service Elevation of Privilege VulnerabilityPatch nowKEVEPSS 9.38%Nov 19, 2024
- UnknownMicrosoft Windows Improper Privilege ManagementPatch nowKEVEPSS 1.21%Nov 19, 2024
- Medium6.9Palo Alto Networks PAN-OS Management Interface OS Command Injection VulnerabilityPatch nowKEVEPSS 94.82%Nov 18, 2024
- High7.5Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization VulnerabilityPatch nowKEVEPSS 1.72%Nov 18, 2024
- Critical9.3Palo Alto Networks PAN-OS Management Interface Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.86%Nov 18, 2024
- Medium5.3MDaemon Email Server Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 31.36%Nov 15, 2024
- UnknownFortinet forticlient Cleartext Storage of Sensitive InformationPatch nowKEVEPSS 0.14%Nov 15, 2024
- Critical9.8GeoVision Devices OS Command Injection VulnerabilityPatch nowKEVEPSS 28.39%Nov 14, 2024
- Unknownreally-simple-plugins really_simple_security Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 82.22%Nov 14, 2024
- UnknownChartify WordPress Chart Plugin For WordPress Local File Inclusion VulnerabilityPatch nowKEVEPSS 4.81%Nov 14, 2024
- UnknownD-Link dns-320_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 96.28%Nov 13, 2024
- Medium5.1Citrix Session Recording Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 14.64%Nov 12, 2024
- Medium5.1Citrix Session Recording Improper Privilege Management VulnerabilityPatch nowKEVEPSS 3.48%Nov 12, 2024
- High8.8Microsoft Windows Task Scheduler Privilege Escalation VulnerabilityPatch nowKEVEPSS 14.18%Nov 12, 2024
- Medium6.5Microsoft Windows NTLMv2 Hash Disclosure Spoofing VulnerabilityPatch nowKEVEPSS 85.43%Nov 12, 2024
- UnknownFour-Faith adjust_sys_time OS Command InjectionPatch nowKEVEPSS 84.12%Nov 9, 2024
- High7.8Linux Kernel Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 3.40%Nov 7, 2024
- Medium5.5Linux Kernel Use of Uninitialized Resource VulnerabilityPatch nowKEVEPSS 0.81%Nov 7, 2024
- Unknownrocket.chat rocket.chat Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 3.20%Nov 7, 2024