Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownvillatheme woocommerce_photo_reviews Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 1.63%Sep 11, 2024
- UnknownAdobe Acrobat and Reader Use After Free Remote Code Execution VulnerabilityPatch nowKEVEPSS 2.34%Sep 11, 2024
- UnknownVMware ESXi, Workstation, and Fusion UHCI USB Controller VulnerabilityPatch nowKEVEPSS 0.65%Sep 11, 2024
- UnknownVMware ESXi, Workstation, and Fusion XHCI USB Controller VulnerabilityPatch nowKEVEPSS 3.54%Sep 11, 2024
- Unknownvertaai modeldb Path Traversal: '\..\filename'Patch nowKEVEPSS 2.97%Sep 11, 2024
- High7.2Ivanti Cloud Services Appliance OS Command Injection VulnerabilityPatch nowKEVEPSS 88.53%Sep 10, 2024
- UnknownMicrosoft Windows Update Remote Code Execution VulnerabilityPatch nowKEVEPSS 12.92%Sep 10, 2024
- High8.8Microsoft Windows MSHTML Platform Spoofing VulnerabilityPatch nowKEVEPSS 54.49%Sep 10, 2024
- High7.3Microsoft Publisher Protection Mechanism Failure VulnerabilityPatch nowKEVEPSS 2.67%Sep 10, 2024
- Medium5.4Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure VulnerabilityPatch nowKEVEPSS 10.03%Sep 10, 2024
- High7.8Microsoft Windows Installer Improper Privilege Management VulnerabilityPatch nowKEVEPSS 6.26%Sep 10, 2024
- Unknownecho anti_cheat_tool Improper Privilege ManagementPatch nowKEVEPSS 0.47%Sep 10, 2024
- Unknownvoipmonitor voipmonitor Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 36.63%Sep 6, 2024
- Critical9.8Cisco Smart Licensing Utility Static Credential VulnerabilityPatch nowKEVEPSS 97.09%Sep 4, 2024
- High7.5Apache OFBiz Forced Browsing VulnerabilityPatch nowKEVEPSS 99.98%Sep 4, 2024
- UnknownSensei LMS Email Template LeakPatch nowKEVEPSS 1.75%Sep 4, 2024
- Unknownjournyx journyx Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 32.92%Sep 4, 2024
- UnknownSynacor Zimbra Collaboration Suite (ZCS) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 63.56%Sep 4, 2024
- Unknownyandex yandex_browser Untrusted Search PathPatch nowKEVEPSS 0.71%Sep 3, 2024
- UnknownHAProxy Endless Loop HTTP/2 VulnerabilityPatch nowKEVEPSS 1.20%Sep 3, 2024
- Critical9.8Progress WhatsUp Gold SQL Injection VulnerabilityPatch nowKEVEPSS 93.00%Aug 29, 2024
- UnknownFastAdmin /index/ajax/lang Directory Traversal VulnerabilityPatch nowKEVEPSS 16.88%Aug 29, 2024
- UnknownAVTECH IP Camera Command Injection VulnerabilityPatch nowKEVEPSS 39.00%Aug 28, 2024
- Unknownsuperstorefinder super_store_finder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.46%Aug 28, 2024
- Unknownsuperstorefinder super_store_finder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.46%Aug 28, 2024