Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownDrayTek vigor2960_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 6.72%Sep 18, 2024
- UnknownWordPress wordpress Time-of-check Time-of-use (TOCTOU) Race ConditionPatch nowKEVEPSS 3.43%Sep 18, 2024
- Unknownnetgate pfblockerng Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 91.88%Sep 18, 2024
- Unknownejs ejs Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 32.81%Sep 18, 2024
- UnknownCisco RV Series Routers Stack-based Buffer OverflowPatch nowKEVEPSS 75.32%Sep 18, 2024
- UnknownNetgear D7000 and Other Routers Authentication Bypass VulnerabilityPatch nowKEVEPSS 17.64%Sep 18, 2024
- Unknownrosariosis rosariosis Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 50.64%Sep 18, 2024
- UnknownIBM websphere_application_server Deserialization of Untrusted DataPatch nowKEVEPSS 34.18%Sep 18, 2024
- UnknownTenda f3_firmware Direct Request ('Forced Browsing')Patch nowKEVEPSS 35.25%Sep 18, 2024
- UnknownCisco rv340w_firmware Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 2.17%Sep 18, 2024
- UnknownFour-Faith f3x24_firmware Missing AuthorizationPatch nowKEVEPSS 4.91%Sep 18, 2024
- Unknownsynology calendar Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.25%Sep 18, 2024
- UnknownQNAP QTS Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 3.34%Sep 18, 2024
- Critical9.8VMware vCenter Server Privilege Escalation VulnerabilityPatch nowKEVEPSS 17.36%Sep 17, 2024
- Critical9.8VMware vCenter Server Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 54.57%Sep 17, 2024
- High7.2PTZOptics PT30X-SDI/NDI Cameras OS Command Injection VulnerabilityPatch nowKEVEPSS 79.84%Sep 17, 2024
- Critical9.1PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass VulnerabilityPatch nowKEVEPSS 58.79%Sep 17, 2024
- UnknownAim _backup_run Function File Path Restriction Bypass VulnerabilityPatch nowKEVEPSS 53.11%Sep 16, 2024
- UnknownGNU C Library iconv() Function VulnerabilityPatch nowKEVEPSS 88.33%Sep 16, 2024
- Unknownviessmann vitogate_300_firmware Use of Hard-coded PasswordPatch nowKEVEPSS 80.40%Sep 16, 2024
- UnknownTVT DVR queryDevInfo Sensitive Device Information Disclosure VulnerabilityPatch nowKEVEPSS 32.03%Sep 14, 2024
- Unknownrhubcom turbomeeting Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 40.61%Sep 14, 2024
- Unknownthimpress learnpress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 12.06%Sep 12, 2024
- Unknownthimpress learnpress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 62.88%Sep 12, 2024
- Unknownraisecom msg2300_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 93.40%Sep 12, 2024