Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownkeepass keepass Cleartext Transmission of Sensitive InformationPatch nowKEVEPSS 4.40%Jul 25, 2024
- UnknownApache HTTP Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')Patch nowKEVEPSS 84.51%Jul 25, 2024
- UnknownOracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications OXI Component VulnerabilityPatch nowKEVEPSS 44.96%Jul 25, 2024
- UnknownTP-Link tl-wr840n_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 36.47%Jul 25, 2024
- Unknownmomentjs moment Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 13.90%Jul 25, 2024
- Unknownphp_everywhere_project php_everywhere Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.62%Jul 25, 2024
- Unknownphp_everywhere_project php_everywhere Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.66%Jul 25, 2024
- Unknownphp_everywhere_project php_everywhere Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.06%Jul 25, 2024
- UnknownMicrosoft SharePoint Deserialization of Untrusted DataPatch nowKEVEPSS 16.52%Jul 25, 2024
- UnknownTerramaster index.php app/del VulnerabilityPatch nowKEVEPSS 16.09%Jul 25, 2024
- UnknownSamba Samba Out-of-bounds ReadPatch nowKEVEPSS 73.59%Jul 25, 2024
- UnknownTalend ESB Runtime Unauthenticated Jolokia HTTP Endpoint VulnerabilityPatch nowKEVEPSS 1.25%Jul 25, 2024
- Unknownipeak ipeakcms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 18.57%Jul 25, 2024
- UnknownMicrosoft Exchange Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 36.24%Jul 25, 2024
- Unknowntableau tableau_server Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 14.31%Jul 25, 2024
- UnknownVMware vrealize_operations_for_horizon Incorrect AuthorizationPatch nowKEVEPSS 0.50%Jul 25, 2024
- Unknownfullworksplugins stop_user_enumeration Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.39%Jul 25, 2024
- UnknownSiemens simatic_s7_cpu_1200_firmware Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 20.86%Jul 25, 2024
- Unknownwpwebinfotech social_auto_poster Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.82%Jul 24, 2024
- UnknownParsec Automation TrackSYS 11.x.x /TS/export/pagedefinition VulnerabilityPatch nowKEVEPSS 2.04%Jul 24, 2024
- Unknowncontest-gallery contest_gallery Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.31%Jul 24, 2024
- Critical9.8Acronis Cyber Infrastructure (ACI) Insecure Default Password VulnerabilityPatch nowKEVEPSS 53.25%Jul 24, 2024
- Unknowngrupposcai realgimm Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.12%Jul 24, 2024
- UnknownServiceNow Washington DC, Vancouver, and Utah Now Platform Administrative User Information Disclosure VulnerabilityPatch nowKEVEPSS 33.59%Jul 23, 2024
- Unknowntelegram telegram Improper Input ValidationPatch nowKEVEPSS 1.36%Jul 22, 2024